Hardware and Software User Manual Revision Date: 1/3/2017
TELEDYNE LECROY Copyright © 2017 Teledyne LeCroy, Inc. FTS, Frontline, Frontline Test System, ComProbe Protocol Analysis System and ComProbe are registered trademarks of Teledyne LeCroy, Inc. The Bluetooth SIG, Inc. owns the Bluetooth® word mark and logos, and any use of such marks by Teledyne LeCroy, Inc. is under license. All other trademarks and registered trademarks are property of their respective owners.
TELEDYNE LECROY Contents Chapter 1 Frontline Hardware & Software 1 1.1 What is in this manual 2 1.2 Computer Minimum System Requirements 2 1.3 Software Installation 2 Chapter 2 Getting Started 3 2.1 BPA low energy Hardware 3 2.2 Data Capture Methods 3 2.2.1 Opening Data Capture Method 3 2.2.2 Frontline® BPA low energy Data Capture Methods 5 2.3 Control Window 6 2.3.1 Control Window Toolbar 7 2.3.2 Configuration Information on the Control Window 8 2.3.
TELEDYNE LECROY 4.1.1 Air Sniffing: Positioning Devices 31 4.1.2 Capturing Data to Disk - General Procedure 33 4.1.3 Extended Inquiry Response 35 4.2 Protocol Stacks 36 4.2.1 Protocol Stack Wizard 37 4.2.2 Creating and Removing a Custom Stack 38 4.2.3 Reframing 39 4.2.4 Unframing 39 4.2.5 How the Analyzer Auto-traverses the Protocol Stack 40 4.2.6 Providing Context For Decoding When Frame Information Is Missing 41 4.3 Analyzing Protocol Decodes 41 4.3.1 The Frame Display 41 4.3.
TELEDYNE LECROY 4.6 Data/Audio Extraction Chapter 5 Navigating and Searching the Data 5.1 Find 155 159 159 5.1.1 Searching within Decodes 160 5.1.2 Searching by Pattern 162 5.1.3 Searching by Time 164 5.1.4 Using Go To 166 5.1.5 Searching for Special Events 167 5.1.6 Searching by Signal 168 5.1.7 Searching for Data Errors 171 5.1.8 Find - Bookmarks 173 5.1.9 Changing Where the Search Lands 174 5.1.10 Subtleties of Timestamp Searching 175 5.2 Bookmarks 175 5.2.
TELEDYNE LECROY 6.6.2 Exporting a File with Event Display Export Chapter 7 General Information 190 7.1 System Settings and Progam Options 190 7.1.1 System Settings 190 7.1.2 Changing Default File Locations 194 7.1.3 Side Names 196 7.1.4 Timestamping 197 7.2 Technical Information 200 7.2.1 Performance Notes 200 7.2.2 BTSnoop File Format 201 7.2.3 Progress Bars 204 7.2.4 Event Numbering 204 7.2.5 Useful Character Tables 204 7.2.6 DecoderScript Overview 207 7.2.
TELEDYNE LECROY A.2.5 Encryption Key Generation and Distribution 225 A.2.6 Encrypting The Data Transmission 226 A.2.7 IRK and CSRK Revisited 226 A.2.8 Table of Acronyms 227 A.3 Bluetooth Virtual Sniffing 228 A.3.1 Introduction 228 A.3.2 Why HCI Sniffing and Virtual Sniffing are Useful 228 A.3.3 Bluetooth Sniffing History 229 A.3.4 Virtual Sniffing—What is it? 229 A.3.5 The Convenience and Reliability of Virtual Sniffing 230 A.3.6 How Virtual Sniffing Works 230 A.3.
Chapter 1 Frontline Hardware & Software Frontline Test Equipment family of protocol analyzers work with the following technologies. l l Classic Bluetooth Bluetooth low energy (BPA LE supports Bluetooth low energy features through Bluetooth 4.2, except optional extended packet length.) l Dual Mode Bluetooth (simultaneous Classic and low energy) l Bluetooth Coexistence: Bluetooth with 802.11 Wi-Fi l Bluetooth HCI (USB, SD, High Speed UART) l NFC l 802.
TELEDYNE LECROY Chapter 1 Frontline Hardware & Software 1.1 What is in this manual The Frontline User Manual comprises the following seven chapters. The chapters are organized in the sequence you would normally follow to capture and analyze data: set up, configure, capture, analyze, save. You can read them from beginning to end to gain a complete understanding of how to use the Frontline hardware and software or you can skip around if you only need a refresher on a particular topic.
Chapter 2 Getting Started In this chapter we introduce you to the Frontline hardware and show how to start the Frontline analyzer software and explain the basic software controls and features for conducting the protocol analysis. 2.1 BPA low energy Hardware 1. Insert the USB cable mini-connector into the USB port on the Frontline BPA low energy hardware. 2. Insert the other end of the USB cable into the PC. Figure 2.1 - BPA low energy Hardware USB Port 2.
TELEDYNE LECROY Chapter 2 Getting Started Figure 2.2 - Desktop Folder Link 2. Double-click on Frontline ComProbe Protocol Analysis System and the system displays the Select Data Capture Method... dialog. Note: You can also access this dialog by selecting Start > All Programs > Frontline (Version #) > Frontline ComProbe Protocol Analysis System Figure 2.3 - Example: Select Data Capture Method...
Chapter 2 Getting Started TELEDYNE LECROY Three buttons appear at the bottom of the dialog; Run, Cancel, and Help. Select Data Capture Method dialog buttons Description Button Becomes active when a capture method is selected. Starts the selected capture method. Closes the dialog and exits the user back to the computer desktop. Opens Frontline Help. Keyboard shortcut: F1. 3. Expand the folder and select the data capture method that matches your configuration. 4.
TELEDYNE LECROY Chapter 2 Getting Started Figure 2.4 - BPA low energy Select Data Capture Method l Bluetooth low energy o This method requires one Frontline BPA low energy hardware or one Frontline FBLEA hardware. o Used for typical applications to capture Bluetooth low energy data. 2.3 Control Window The analyzer displays information in multiple windows, with each window presenting a different type of information.
Chapter 2 Getting Started TELEDYNE LECROY viewing Ethernet data, the Signal Display is not available. The title bar of the Control window displays the name of the currently open file. The status line (below the toolbar) shows the configuration settings that were in use when the capture file was created. 2.3.1 Control Window Toolbar Toolbar icon displays vary according to operating mode and/or data displayed. Available icons appear in color, while unavailable icons are not visible.
TELEDYNE LECROY Chapter 2 Getting Started 2.3.2 Configuration Information on the Control Window The Configuration bar (just below the toolbar) displays the hardware configuration and may include I/O settings. It also provides such things as name of the network card, address information, ports in use, etc. 2.3.3 Status Information on the Control Window The Status bar located just below the Configuration bar on the Control window provides a quick look at current activity in the analyzer.
Chapter 2 Getting Started TELEDYNE LECROY 2.3.5 Control Window Menus The menus appearing on the Control window vary depending on whether the data is being captured live or whether you are looking at a .cfa file. The following tables describe each menu. Table 2.2 - Control Window File Menu Selections Hot Selection Description Key Mode Live Close Closes Live mode.
TELEDYNE LECROY Table 2.3 - Control Window View Menu Selections Selection Hot key Description Mode Live & Capture File Event Display CtrlShift-E Opens the Event Display window for analyzing byte level data. Frame Display CtrlShift-M Opens the Frame Display window for analyzing protocol level data Bluetooth low energy Timeline Opens the Bluetooth low energy Timeline window for analyzing protocol level data in a packet chronological format and in packet throughput graph.
Chapter 2 Getting Started Mode Live & Capture File TELEDYNE LECROY Table 2.5 - Control Window Live Menu Selections (continued) Selection Hot-Key Description 0 - Classic Hardware Settings 1 - Bluetooth low energy 0 - Classic I/O Settings 1 - Bluetooth low energy System Settings AltEnter Opens the System Settings dialog for configuring capture files. Directories... Opens the File Locations dialog where the user can change the default file locations.
TELEDYNE LECROY Mode Chapter 2 Getting Started Table 2.5 - Control Window Live Menu Selections (continued) Selection Hot-Key Description Enable/Disable Audio Expert System When enabled, the Audio Expert System is active, other wise it is not available. Only available when an Audio Expert System licensed device is connected.
Chapter 3 Configuration Settings In this section the Frontline software is used to configure an analyzer for capturing data . 3.1 BPAle I/O Settings - Datasource 3.1.1 BPA Low Energy datasource Toolbar/Menu The datasource dialog toolbar and menu options are listed below. Table 3.1 - BPA Low Energy Datasource Toolbar Icon Description Start Sniffing button to begin sniffing. All settings are saved automatically when you start sniffing. Pause button to stop sniffing.
TELEDYNE LECROY Chapter 3 Configuration Settings 3.1.2 BPA low energy Devices Under Test You can select the ComProbe BPA low energy analyzer for sniffing Bluetooth low energy communications on available devices. Note: Frontline BPA LE supports Bluetooth low energy features through Bluetooth 4.2, except optional extended packet length.
Chapter 3 Configuration Settings TELEDYNE LECROY Figure 3.1 - BPA Low Energy datasource Devices Under Test Tab The default value in the LE Device drop down is Sync with First Master. Devices in the LE Device Database may be selected.
TELEDYNE LECROY toolbar save button Chapter 3 Configuration Settings becomes available. Clicking on this button will save the current Devices Under Test settings that will be available the next time you open ComProbe BPA low energy analysis. To begin sniffing Bluetooth low energy simply click the red Start button on the datasource toolbar. Specifying the LE Device Address You may specify the LE device you are testing by typing in or choosing its address (BD_ADDR).
Chapter 3 Configuration Settings TELEDYNE LECROY Note: f you use Copy/Paste to insert the Long Term Key , ComProbe software will auto correct (remove invalid white spaces) to correctly format the key 2. Enter a PIN or out-of-band (OOB) value for pairing. This optional information offers alternative pairing methods. Click here to learn more about these possible pairing values. One of two pieces of data allow alternative pairing: 1. PIN is a six-digit (or less if leading zeros are omitted) decimal number.
TELEDYNE LECROY Chapter 3 Configuration Settings Device Control Menu Right-clicking anywhere in the device list will display the device control menu that will Select, Delete, or Add a device.. Clicking on one of these menu items will perform the following actions. Table 3.3 - LE Device Database Control Menu Menu Item Action Select Will place this device into the LE Device field in the Device Under Test tab. The device must be selected/highlighted in the list prior to making this menu selection.
Chapter 3 Configuration Settings TELEDYNE LECROY Table 3.4 - BPA Low Energy Datasource LE Device Database Fields(continued) Column Description BD_Addr Type May be either "Public" or "Random". "Public"addresses are set to BD_Addr. "Random" is either a 'static" or "private" address. "Static" address is a 48 bit randomly generated address. "Private" address is a 48 bit "non-resolvable" address or "resolvable' address. A "resolvable" address is generated using an IRK.
TELEDYNE LECROY Chapter 3 Configuration Settings When you select the Update Firmware on the BPA Low Energy datasource information tab, the Update BPA low energy ComProbe firmware dialog appears. You use this dialog to update your low energy analyzer with the latest firmware. It is very important that you update the firmware. If the firmware versions are not the same, you will not be able to start sniffing. Figure 3.7 - BPA low energy Information Tab Update Firmware Dialog 1.
Chapter 3 Configuration Settings TELEDYNE LECROY For help on setting the parameters, click the Help button on each tab to get help information specific to that decoder. If you need to change the parameters later, l Choose Set Initial Decoder Parameters... from the Options menu on the Control and Frame Display windows. Figure 3.8 - Select Set Initial Decoder Parameters... from Control window The Set Initial Decoder Parameters window opens with a tab for each decoder that requires parameters. Figure 3.
TELEDYNE LECROY Chapter 3 Configuration Settings Figure 3.10 - Set Subsequent Decoder Parameters... from Control window Figure 3.11 - Example: Set Subsequent Decode for Frame #52, RFCOMM l Each entry in the Set Subsequent Decoder Parameters dialog takes effect from the specified frame onward or until redefined in this dialog on a later frame. l The Remove Override button will remove the selected decode parameter override. l The Remove All button will remove all decoder overrides.
Chapter 3 Configuration Settings TELEDYNE LECROY 1. Select Set Initial Decoder Parameters... from the Options menu on the Control the Frame Display window or window. 2. Click the Open Template icon in the toolbar and select the desired template from the pop up list. The system displays the content of the selected template in the Initial Connections list at the top of the dialog 3.
TELEDYNE LECROY Chapter 3 Configuration Settings 3.2.1.3 Deleting a Template 1. After opening the Set Initial Decoder Parameters window click the Delete button in the toolbar. The system displays the Template Manager dialog with a list of saved templates. 2. Select (click on and highlight) the template marked for deletion and click the Delete button. The system removes the selected template from the list of saved templates. 3.
Chapter 3 Configuration Settings TELEDYNE LECROY Figure 3.13 - L2CAP Decoder parameters tab The L2CAP Set Initial Decoder Parameters dialog requires the following user inputs to complete a Parameter : l Stream - This identifies the role of the device initiating the frame (master or slave) l Channel ID - The channel number 0 through 78 l l Address - This is the physical connection values for the devices. Each link in the net will have an address. A piconet can have up to seven links.
TELEDYNE LECROY l IEEE P11073 20601 l -Raw Data- Chapter 3 Configuration Settings Adding, Deleting, and Saving L2CAP Parameters 1. From the Set Initial Decoder Parameters window, click on the L2CAP tab. 2. Set or select the L2CAP decoder parameters. 3. Click on the ADD button. The Initial Connection window displays the added parameters. Figure 3.14 - Parameters Added to Decoder 4. To delete a parameter from the Initial Connections window, select the parameter and click on the Delete button. 5.
Chapter 3 Configuration Settings TELEDYNE LECROY 1. Select the frame where the change should take effect 2. Select Set Subsequent Decoder Parameters from the Options menu, or by selecting a frame in the frame display and choosing from the right-click pop-up menu, and make the needed changes. Refer to 3. Change the L2CAP parameter by selecting from the rule to change, and click on the listed parameters. 4. If you wish to remove an overridden rule click on Remove Override button.
TELEDYNE LECROY l l Chapter 3 Configuration Settings Data Source (DS) No.
Chapter 3 Configuration Settings l The capture session started after transmission of the vital information l The analyzer incorrectly received a frame with the traversal information l TELEDYNE LECROY The communication monitored takes place between two players with implicit information not included in the transmission In any case, either view the RFCOMM payload of this frame (and other frames with the same channel) as hex data, or assist the analyzer by selecting a protocol using this dialog.
TELEDYNE LECROY Chapter 3 Configuration Settings Figure 3.17 - Set Subsequent Decoder Parameters selection list Note: If the capture has no user defined overrides, then the system displays a dialog stating that no user defined overrides exist.
Chapter 4 Capturing and Analyzing Data The following sections describe the various ComProbe software functions that capture and display data packets. 4.1 Capture Data 4.1.1 Air Sniffing: Positioning Devices When capturing over the air packets, proper positioning of the Frontline hardware and the Devices Under Test (DUTs) will result in the best possible captures and will mitigate sources of path loss and interference.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data The first step to ensuring reliable air-sniffing data capture is to understand the RF characteristics of the Devices Under Test (DUTs). The Bluetooth Class, antenna types, and radiation patterns are all important factors that can affect the placement of the DUTs and the Frontline hardware. Radiation patterns are rarely spherical, so understanding your device's radiation patterns can greatly enhance successful data capture.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY environment do not place the DUTs and Frontline hardware in close proximity with Wi-Fi transmitting sources such as laptops or routers. Turning off Wi-Fi on the computer running the Frontline software is recommended. Poor Placement A poor test configuration for the analyzer is placing the DUTs very close to each other and the analyzer far away.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 3. Watch the status bar on the Control window to monitor how full the file is. When the file is full, it begins to wrap, which means the oldest data will be overwritten by new data. 4. Click the Stop Capture icon to temporarily stop data capture. Click the Start Capture icon again to resume capture. Stopping capture means no data will be added to the capture file until capture is resumed, but the previously captured data remains in the file. 5.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.3 - Packet Transfer Dialog 4.1.3 Extended Inquiry Response Extended Inquiry Response (EIR) is a tab that appears automatically on the Frame Display window when you capture data.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.4 - Frame Display Extended Inquire Response EIR displays extensive information about the Bluetooth® devices that are discovered as data is being captured. EIR provides more information during the inquiry procedure to allow better filtering of devices before connection; and sniff subrating, which reduces the power consumption in low-power mode.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.2.1 Protocol Stack Wizard The Protocol Stack wizard is where you define the protocol stack you want the analyzer to use when decoding frames. To start the wizard: 1. Choose Protocol Stack from the Options menu on the Control window or click the Protocol Stack icon on the Frame Display. 2. Select a protocol stack from the list, and click Finish. Most stacks are pre-defined here.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 4.2.2 Creating and Removing a Custom Stack To create a custom stack: 1. Choose Protocol Stack from the Options menu on the Control window or click the Protocol Stack icon on the Frame Display toolbar. 2. Select Build Your Own from the list and click Next. 3. The system displays an information screen that may help you decide if you need to define your own custom stack. Defining a custom stack means that the analyzer uses the stack for every frame.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 3. If you select this option, the analyzer uses the stack you defined for every frame. Frames that do use this stack are decoded incorrectly. Save the Stack 1. Click the Add To Predefined List button. 2. Give the stack a name, and click Add. In the future, the stack appears in the Protocol Stack List on the first screen of the Protocol Stack wizard. Remove a Stack 1. Select it in the first screen and click Remove Selected Item From List. 2.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Viewer or Load Capture File to start the software and used only for viewing capture files). To manually unframe your data: 1. Select Unframe from the File menu on the Control window. Unframe is only available if a protocol stack was used to capture the data and there is currently no protocol stack selected. In addition to choosing to Unframe, you can also be prompted to Unframe by the Protocol Stack Wizard. 1.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.2.6 Providing Context For Decoding When Frame Information Is Missing There may be times when you need to provide information to the analyzer because the context for decoding a frame is missing. For example, if the analyzer captured a response frame, but did not capture the command frame indicating the command. The analyzer provides a way for you to supply the context for any frame, provided the decoder supports it.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.5 - Frame Display with all panes active Frame Display Panes The Frame Display window is used to view all frame related information. It is composed of a number of different sections or "panes", where each pane shows a different type of information about a frame. l 42 Summary Pane - The Summary Pane displays a one line summary of each frame for every protocol found in the data, and can be sorted by field for every protocol.
Chapter 4 Capturing and Analyzing Data l l l l l TELEDYNE LECROY Decode Pane - The Decode Pane displays a detailed decode of the highlighted frame. Fields selected in the Decode Pane have the appropriate bit(s) or byte(s) selected in the Radix, Binary, Character , and Event panes Radix Pane - The Radix Pane displays the logical data bytes in the selected frame in either hexadecimal, decimal or octal. Binary Pane - The Binary Pane displays a binary representation of the logical data bytes.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Comparing Frames If you need to compare frames, you can open additional Frame Display windows by clicking on the Duplicate View icon . You can have as many Frame Display windows open at a time as you wish. Frame Wrapping and Display In order to assure that the data you are seeing in Frame Display are current, the following messages appear describing the state of the data as it is being captured.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Table 4.1 - Frame Display Toolbar Icons(continued) Icon Description Show Message Sequence Chart Message Sequence Chart (MSC) displays information about the messages passed between protocol layers. Duplicate View - Creates a second Frame Display window identical to the first. Apply/Modify Display Filters - Opens the Display Filter dialog. Quick Protocol Filter - brings up a dialog box where you can filter or hide one or more protocol layers.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Table 4.1 - Frame Display Toolbar Icons(continued) Icon Description Bluetooth Classic Packet Error Rate Statistics - Opens the Packet Error Rate Statistics display. Reload Decoders - When Reload Decoders is clicked, the plug-ins are reset and received frames are re-decoded. For example, If the first frame occurs more than 10 minutes in the past, the 10-minute utilization graph stays blank until a frame from 10 minutes ago or less is decoded.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Table 4.1 - Frame Display Toolbar Icons(continued) Icon Description Find on Frame Display only searches the Decode Pane for a value you enter in the text box. Find Previous Occurrence - Moves to the previous occurrence of the value in the Frame Display Find. Find Next Occurrence - Moves to the next occurrence of the value in the Frame Display Find. Cancel Current Search - Stops the current Frame Display Find.
TELEDYNE LECROY l Chapter 4 Capturing and Analyzing Data Frames Filtered In: The total number of frames displayed in the filtered results from user applied filters in real-time 4.3.1.3 Hiding and Revealing Protocol Layers in the Frame Display Hiding protocol layers refers to the ability to prevent a layer from being displayed on the Decode pane. Hidden layers remain hidden for every frame where the layer is present, and can be revealed again at any time. You can hide as many layers as you wish.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Frame Display Find is located below the toolbar on the Frame Display dialog. Figure 4.6 - Frame Display Find text entry field Where the more powerful Search/Find functionality searches the Decode, Binary, Radix, and Character panes on Frame Display using TImestamps, Special Events, Bookmarks, Patterns, etc., Figure 4.7 - Search/Find Dialog Find on Frame Display only searches the Decode Pane for a value you enter in the text box. To use Find: 1.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data The next occurrence of the value (if it is found) will be highlighted in the Decode Pane. 4. Select Find Previous Occurrence or Find Next Occurrence to continue the search. There are several important concepts to remember with Find. l l l l When you enter a search string and select Enter, the search moves forward.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 1. Click on the Frame Display icon in Control window toolbar to open the Frame Display. 2. Click on the Duplicate View icon to create Frame Display #2. 3. Click on Event Display icon in Frame Display #2. Event Display #2 opens. This Event Display is labeled #2, even though there is no original Event Display, to indicate that it is synchronized with Frame Display #2. 4. Click on a frame in Frame Display #2.
TELEDYNE LECROY l Chapter 4 Capturing and Analyzing Data The Show only Summary Pane icon displays on the Summary Pane. To close a pane, right-click on the pane and select Hide This Pane from the pop-up menu, or de-select Show [Pane Name] from the View menu. To open a pane, right-click on the any pane and select Show Hidden Panes from the pop-up menu and select the pane from the fly-out menu, or select Show [Pane Name] from the View menu.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.9 - Byte Export dialog Click the OK button to save the export. Clicking the Cancel button will exit Byte Export. 3. The Save As dialog will open. Select a directory location and enter a file name for the exported frames file. Figure 4.10 - Save As dialog Click on the Save button. The exported frames are in a text file that can be opened in any standard text editing application.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.11 - Sample Exported Frames Text File 4.3.1.11 Panes in the Frame Display 4.3.1.11.1 Summary Pane The Summary pane displays a one-line summary of every frame in a capture buffer or file, including frame number, timestamp, length and basic protocol information. The protocol information included for each frame depends on the protocol selected in the summary layer box (located directly below the main toolbar).
Chapter 4 Capturing and Analyzing Data l l l TELEDYNE LECROY Clicking on a protocol filter tab in the General group filters in all packets containing that protocol regardless of each packet’s technology. Clicking on a protocol filter tab in a technology-specific group filters in all packets containing that protocol on that technology. A protocol filter tab appears in the General group only if the protocol occurs in more than one of the technology-specific tab groups.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data When the data connection is encrypted and the packets are successfully decrypted, the sniffer can determine exactly who sent which packet (only non-empty, encrypted packets – empty packets are never encrypted). These packets are labeled either ‘M’ for master or ‘S’ for slave.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Occasionally you may have a packet with an event status of “received without errors,” but a decryption status of “unable to decrypt.” There are three main causes for this, and in order of likelihood they are: 1. Wrong Long-Term Key – having the wrong long-term key will cause this error, so the first thing to check is that your long term key is entered correctly in the datasource settings. 2.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 1. Click and hold on the column header 2. Drag the mouse over the header row. 3. A small white triangle indicates where the column is moved to. 4. When the triangle is in the desired location, release the mouse. Restoring Default Column Settings To restore columns to their default locations, their default widths, and show any hidden columns 1.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Event, Radix, Binary and Character panes. The colors are not assigned to a protocol, but are assigned to the layer. The Event, Radix, Binary, Character and Decode panes are all synchronized with one another. Clicking on an element in any one of the panes highlights the corresponding element in all the other panes. Click the Toggle Expand Decode Pane icon to make the Decode pane taller.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Colors are used to show which protocol layer each byte belongs to. The colors correspond to the layers listed in the Decode pane. The Event, Radix, Binary, Character and Decode panes are all synchronized with one another. Clicking on an element in any one of the panes highlights the corresponding element in all the other panes. 4.3.1.11.10 Event Pane The Event pane shows the physical bytes in the frame.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.3.1.12.1 Data Byte Color Notation The color of the data in the panes specifies which layer of the protocol stack the data is from. All data from the first layer is bright blue, the data from the second layer is green, the third layer is pink, etc. The protocol name for each layer in the Decode pane is in the same color. Note that the colors refer to the layer, not to a specific protocol.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 1. Display filters allow a user to look at a subset of captured data without affecting the capture content. Frames matching the filter criteria appear in the Frame Display; frames not matching the criteria will not appear. 2. Connection filters Two options are available. a. A Bluetooth connection: Displays only the frames associated with a Classic Bluetooth link or a Bluetooth low energy access address.
Chapter 4 Capturing and Analyzing Data l TELEDYNE LECROY Named filters are user-defined. User-defined filters persist in a template file. User defined filters can be deleted. Quick Filters l Quick Filters are combinations of Protocol Filters and/or Named Filters that are displayed on the Quick Filter tab. l Quick Filters cannot be saved and do not persist across sessions. l Quick Filters are created on the Quick Filter Dialog. 4.3.1.13.1.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.16 - Example: Set Conditions Self Configuring Based on Frame Range 2. Select Include or Exclude to add filtered data or keep out filtered data respectively. 3. Select the initial condition for the filter from the drop-down list. 4. Set the parameters for the selected condition in the fields provided. The fields that appear in the dialog box are dependent upon the previous selection.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.3.1.13.1.3 Named Display Filters You can create a unique display filter by selecting a data type on the Frame Display and using a right click menu. When you create a Name Filter, it appears in the Quick Filtering dialog, where you can use it do customize the data you see in the Frame Display panes. 1. Select a frame in the Frame Display Summary Pane. 2.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.17 - Two Filter Conditions Added with an AND Operator 6. Click the plus icon Use the up on the left side of the dialog box and repeat steps 4 and 5 for the next condition. and down the delete button arrow icons on the left side of the dialog box to order your conditions, and to delete conditions from your filter. 7. Continue adding conditions until your filter is complete. 8. Include parentheses as needed and set the boolean operators.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.3.1.13.1.5 Defining Node and Conversation Filters There are two steps to using Node and Conversation display filter. Define the filter conditions, and then apply the filter to the data set. The analyzer combines both filter definition and application in one dialog. 1. Click the Display Filters icon on the Frame Display window or select Apply/Modify Display Filters… from the filter menu to open the Set Condition dialog box. 2.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Deleting Saved Display Filters 1. Select Delete Display Filters from the Filter menu in the Frame Display window to open the Delete Named Condition dialog. The system displays the Delete Named Condition dialog with a list of all user defined filters. 2. Select the filter to be deleted from the list. 3. Click the Delete button. 4. Click OK. The Delete Named Condition dialog box closes and the system deletes the filter.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.19 - Using Named Filters Section of Quick Filters to Show/Hide Filters Note: When you have multiple Frame Display windows with a display filter or filters, those filter do not automatically appear in other Frame Display windows. You must use the Hide/Show dialog to display a filter created in one Frame Display in different Frame Display window. 4.3.1.13.1.7 Editing Filters Modifying a Condition in a Filter 1.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 1. Click the Display Filters icon on the Frame Display window or select Apply/Modify Display Filters… from the Filter menu to open the Set Condition dialog box. Click on the Advanced button to show the condition in Boolean format. The dialog box displays the current filter definition. To display another filter, click the Open icon, and select the filter from the pop-up list of all the saved filters. Figure 4.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.21 - Rename Filters Dialog 2. Select the filter to be renamed from the combo box. 3. Enter a new name for the filter in the New Name box. Optionally click the Apply button and the new name will appear in the Filters combo box and the New Name box will empty. This option allows you to rename several filters without closing the Rename Filter dialog each time. 4. Click OK. The Rename Filter dialog box closes and the system renames the filter.
TELEDYNE LECROY l l l Classic Bluetooth: o All will filter in all Classic Bluetooth frames. You are in effect filtering out any Bluetooth low energy frames and are selecting to filter in all the Classic Bluetooth links. o Links displays all the master-slave links. You can select only one link to filter in. The selected link will filter in only the frames associated with that link. Bluetooth low energy: o All will filter in all Bluetooth low energy frames.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY From the Frame Display panes Right-click anywhere in a Frame Display pane and select Connection Filter in the pop-up menu. The procedure for creating a connection filter are identical as described in From the Frame Display Filter menu, above. Figure 4.24 - Connection Filter from the Frame Display Pane right-click From the Frame Display frame selection Select a frame in the summary pane. Right-click and select Connection Filter in the pop-up menu.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.25 - Connection Filter from frame selection right-click Creating from any Frame Display window A Connection Filter can be created from any open Frame Display window, and the filtering will always be applied to the original captured data set. 4.3.1.13.2.2 Connection Filter Display Once you have selected which connections to filter in, another Frame Display will open. The original Frame Display will remain open, and can be minimized.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Display Example 1: Bluetooth low energy Access Address selected Figure 4.26 - Front Display: Filtered on Access Address 0x8e89bed6 In the figure above is an example Bluetooth low energy data set connection filtered on Access Address = 0x8e89bed6. The Frame Display in the front is the filtered data set. One way to note the difference between the original and the filtered display is to observe the Protocol Tabs.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.27 - Unfiltered: Capture File with Classic, low energy, and 802.11 When the Frame Display with the filtered 802.11 data set appears, only the Protocol Tabs for 802.11 are present and the tabs for Classic Bluetooth and Bluetooth low energy have been filtered out. Figure 4.28 - Connection Filter selecting All 802.11 frames, front 4.3.1.13.3 Protocol Filtering from the Frame Display 4.3.1.13.3.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.29 - Frame Display Quick Filtering and Hiding Protocols Dialog The box on the left is Protocols To Filter In. When you select the checkbox for a protocol in the Protocols to Filter In, the Summary pane will only display those frames that contain data from that protocol. If you filter on more than one protocol, the result are all frames that contain at least one of those protocols.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 1. Select the tab of the desired protocol, or open the Summary combo box. 2. Select the desired protocol. 3. To filter on a different layer, just select another tab, or change the layer selection in the combo box. Filtering on all Frames with Errors To filter on all frames with errors: 1. Open the Frame Display window. 2. Click the starred Quick Filter icon or select Quick Filtering from the Filter menu 3.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.30 - Bluetooth low energy Timeline You access the Timeline by selecting Bluetooth low energy Timeline from the View menu or by pressing the Bluetooth low energy Timeline icon on the Control window toolbar and Frame Display toolbar. In computing throughput, packets that have a CRC error are excluded. 4.3.2.1 low energy Timeline Toolbar The toolbar contains the following: Table 4.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Table 4.3 - Bluetooth low energy Timeline Toolbar (continued) Icon Description Last Packet Previous Interframe Spacing (IFS) Error l l Interframe Spacing is considered valid if it is within 150 μs + or – 2us If the Interframe Spacing is less than 148 us or greater than 152 us but less than or equal to 300 μs, it is considered an IFS error.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Table 4.4 - Bluetooth low energy Timeline Menus (continued) Menu Zoom Selection Zoom In Description Displays less of the timeline, but in greater detail. Keyboard Shortcut: (Ctrl +) Zoom Out Displays more of the timeline, in less detail. Keyboard Shortcut: (Ctrl -) Zoom In Tool Displays a magnifying glass icon with a + and an arrow that allows for precise positioning on the timeline.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Table 4.4 - Bluetooth low energy Timeline Menus (continued) Menu Selection 562.5 ms (450 1.25 ms time intervals (30x15)) Description 30 segments, 15 markers per segment 810 ms (648 1.25 ms time intervals (36x18)) 36 segments, 18 markers per segment 1.1025 s (882 1.25 ms time intervals (42x21)) 30 segments, 15 markers per segment 1.44 s (1152 1.25 ms time intervals (48x24)) 48 segments, 24 markers per segment 1.8225 s (1458 1.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Table 4.4 - Bluetooth low energy Timeline Menus (continued) Menu Selection Navigate First Packet Description Goes to the first packet. Keyboard Shortcut: Home Last Packet Goes to the last packet. Keyboard Shortcut: End Previous Packet Goes to the packet prior to the currently selected packet. Keyboard Shortcut: Left Arrow Next Packet Goes to the next packet after the currently selected packet.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 4.3.2.3 low energy Timeline Legend This legend identifies the color coding found in the timeline. l l When you select a packet in the timeline, items in the legend that relate to the packet are highlighted. Bold text indicates that the type of packet has been seen in the timeline. 4.3.2.4 Throughput Displays Throughput is payload over time. There are 3 categories of throughput: 4.3.2.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.3.2.7 Throughput Graph The following figure depicts the Throughput Graph. Figure 4.31 - Bluetooth low energy Timeline Throughput Graph The Swap button switches the position of the Timeline and the Throughput graph. Selecting Throughput Display l l l Selecting Packet Throughput displays just the Packet Throughput in graph form and displays the Average and Average and 1 Second Packet Throughput on the left side of the dialog.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data The easiest way to view MIC data is to use the Frame Display. 1. Using the Decoder pane scroll through the frames until LE Data shows "Encrypted MIC". 2. Place the cursor on the Encrypted MIC data and while holding the left mouse button drag the field to the Summary pane. 3. An Encrypted MIC column is added to the Summary pane. Figure 4.32 - Creating Encrypted MIC in Frame Display Summary pane 4.3.2.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.33 - Bluetoothlow energy Timeline 4.3.2.9 How Packets Are Displayed Bluetooth low energy packets are displayed in the low energy timeline in Segments and Rows. l Segments are "pieces" of the timeline. You can zoom in to show just one segment, or you can zoom out to show multiple segments. In multiple segment displays the segments are contiguous from top to bottom. Refer to the diagram below.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.34 - Diagram of low energy Timeline Flow with Segment and Row Relationship l Rows can display either source device access addresses or the three radios receiving the data..You choose with methods by selecting Show Device Address Rows or Show Radio Rows from the Format menu. Show Device Address Rows will display rows of packets from sending devices. The source device address will appear on the left of each row.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.36 - Radio Rows l l l l The mouse wheel scrolls the timeline horizontally when displaying a single segment, and scrolls vertically when displaying multiple segments You can also zoom by using the right-click menu (which displays magnification values), using the + and - Zoom buttons on the toolbar, or by selecting a value from the Zoom menu.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.37 - low energy Timeline and Frame Display Packet Synchronization 4.3.2.10 low energy Timeline Visual Elements The low energy Timeline consists of the following visual elements: l Time Markers - Time markers indicated by vertical blue lines are shown at 1.25 ms intervals. The markers are provided to help visualize the timescale and are also useful when using dual-mode chips that do BR/EDR and LE at the same time.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY previous segment. In addition to the timestamps the segment information bar shows the zoom value in the center of the bar. Figure 4.39 - Bluetooth le Timeline Segment Timestamp and Zoom Value Note: The raw timestamp value is the number of 100-nanosecond intervals since the beginning of January 1, 1601. This is standard Windows time.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.41 - Bluetooth le Timeline Packet Info Line for Multiple Selected Packets l Floating Information Window (aka Tooltip) - The information window displays when the mouse cursor hovers on a packet. It persists as long as the mouse cursor stays on the packet. l Discontinuities - Discontinuities are indicated by cross-hatched slots. See the Discontinuities section. l Packet Status - Packet status is indicated by color codes.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY A discontinuity is indicated by a cross-hatched pattern drawn between two packets and a corresponding vertical dashed line in the throughput graph. When the timestamp delta is greater than 4.01 seconds, the discontinuity is a cosmetic convenience that avoids excessive empty space. When the timestamp delta is negative, the discontinuity is necessary so that the packets can be drawn in the order that they occur. 4.3.2.
TELEDYNE LECROY l l l l Chapter 4 Capturing and Analyzing Data Multiple packets are selected either by dragging the mouse or by holding down the shift key while navigating or clicking. When a single packet is selected in the timeline it is also becomes selected in the Frame Display. When multiple packets are selected in the timeline, only one of them is selected in the Frame Display. The keyboard left arrow key goes to the previous packet. The right arrow key goes to the next packet.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.3.2.14 Zoom menu Figure 4.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 4.3.2.15 Single Segment Zoom Zoom Menu Single Segment: Each selection defines the timeline displayed, the number of segments, and number of 1.25 ms markers withing the segment. For example, selecting "33.75 ms (1x27)" will display "33.75 ms" of the throughput graph in "1" segment with "27" markers. The scroll bar at the bottom of the segment will scroll the throughput graph view port. 4.3.2.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Zoom Menu Multiple Segment: Each selection defines the timeline view port, the number of segments, and number of 1.25 ms markers withing the segment. For example, selecting "7.5 ms (6 1.25 ms time intervals (3x2))" will display "7.5 ms" of the total timeline in "3" segments of with "2" markers per segment for a total of "6" markers. The scroll bar at the left of the segments will scroll the view through the timeline. 4.3.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Selection Selection Table 4.5 - Coexistence View File Menu Selections Description Reset Resets the Coexistence View window to its default settings. Exit Closes the Coexistence View window. Table 4.6 - Coexistence View Format Menu Selections Description Show Packet Number When checked, the packet number shows below the packet in the Viewport. Show Packet Type When checked, the packet type shows below the packet in the Viewport.
Chapter 4 Capturing and Analyzing Data Selection Set 802.11 Tx Address TELEDYNE LECROY Table 4.6 - Coexistence View Format Menu Selections (continued) Description When checked, this selection is used to specify the 802.11 source address, where any packet with that source address is considered a Tx packet and is shown with a purple border in the timelines. Performs the same function as the SET button. Refer to on page 115 The following three selections are mutually exclusive.
TELEDYNE LECROY Selection Large Throughput Graph Chapter 4 Capturing and Analyzing Data Table 4.6 - Coexistence View Format Menu Selections (continued) Description When checked, the Throughput Graph appears in the bottom half of the window, swapping position with the timeline. When not checked, the Throughput Graph appears in its default position at the top of the window. Performs the same function as clicking the Swap button. See on page 108.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Table 4.7 - Coexistence View Zoom Menu Selections (continued) Selection Description Zoom Out When clicked, Viewport time duration increases Hot Key Ctrl+Minus The following two selectioins are mutually exclusive. Scroll Tool (Mouse Wheel Scrolls - Ctrl Key Switches to Zoom Tool) When checked, sets the mouse wheel to scroll the Viewport. Pressing the Ctrl key while scrolling switches to zooming the Viewport.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Table 4.7 - Coexistence View Zoom Menu Selections (continued) Selection Description Hot Key The following 21 selections are mutually exclusive. 150 usec Each of these Zoom selections sets the Viewport and the Timeline to a fixed time duration. 300 usec 625 usec (1 Bluetooth slot) 1.25 msec (2 Bluetooth slots) 1.875 msec (3 Bluetooth slots) 2.5 msec (4 Bluetooth slots) 3.125 msec (5 Bluetooth slots) 6.25 msec (10 Bluetooth slots) 15.
Chapter 4 Capturing and Analyzing Data Table 4.8 - Coexistence View Navigate Menu Selections Description Hot key Selection First Packet TELEDYNE LECROY When clicked, the first packet in the session is Home selected and displayed in the Timeline. Performs the same function as the First Packet button. Last Packet When clicked, the last packet in the session is End selected and displayed in the Timeline. Performs the same function as the Last Packet button.
TELEDYNE LECROY Selection Chapter 4 Capturing and Analyzing Data Table 4.8 - Coexistence View Navigate Menu Selections (continued) Description Hot key Next Error Packet When clicked, selects the next packet with an error from the current selection and displays it in the Timeline. Performs the same function as the Next Error Packet button. First Legend Packet When clicked, selects the first legend packet in the session and displays it in the Timeline.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Table 4.9 - Coexistence View Toolbar icons Icon Description Move to the first packet. Move to the previous packet. Move to the next packet. Move to the last packet. Move to the previous retransmitted packet. Move to the next retransmitted packet Move to the previous invalid IFS for Bluetooth low energy. Move to the next invalid IFS for Bluetooth low energy. Move to the previous bad packet. Move to the next bad packet.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Table 4.9 - Coexistence View Toolbar icons (continued) Icon Description When selected the cursor changes from Scroll to a context-aware zooming cursor. Click on normal cursor to remove the zooming cursor. Zooming cursor. Scroll Lock/Unlock during live capture mode. Reset during live capture mode. Clears the display. 4.3.3.3 Coexistence View - Throughput Indicators (Click here to see a video on the Throughput Indicators...
Chapter 4 Capturing and Analyzing Data l l TELEDYNE LECROY Included packets are defined separately for each of the radio buttons that appear above the throughput indicators. Duration of the included packets is measured from the beginning of the first included packet to the end of the last included packet. The radio buttons above the throughput indicators specify which packets are included.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.48 - Throughput Graph viewport. The width of each indicator is the largest 1 second throughput seen up to that point for that technology (Classic Bluetooth, Bluetooth low energy, or 802.11), where the 1 second throughput is calculated anew each time another packet is received. The 1 second throughput indicator will never exceed this width, but the average throughput indicator can.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.51 - Coexistence View Throughput Graph The Throughput Graph is a line graph that shows packet and/or payload throughput over time as specified by the radio buttons in the Throughput group. If the Both radio button is selected, packet and payload throughput are shown as two separate lines for each technology. The payload throughput line is always below the packet throughput line (unless both are 0).
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Placing the mouse pointer on a data point shows a tooltip for that data point. The tooltip first line shows the throughput, the throughput type (packet or payload), and the technology.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.55 - Three positive discontinuities. The viewport is the purple rectangle in the Throughput Graph. It indicates a specific starting time, ending time, and resulting duration, and is precisely the time range used by the Timeline. The packet range that occurs within this time range is shown above the sides of the viewport. Figure 4.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.57 - Small Timeline and large Throughput Graph after pressing the Swap button. The dots on the data points can be toggled on and off by clicking the Dots button. Dots are different sizes for each technology so that they reveal overlapping data points which otherwise wouldn’t be visible. A tooltip can be displayed for each dot. Dots can be removed for greater visibility of the plots when data points are crowded together. Figure 4.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.59 - Overlapping Dots Information Display Clicking the Show Zoom button displays the Zoomed Throughput Graph above the Throughput Graph. The Zoomed Throughput Graph shows the details of the throughput in the time range covered by the viewport in the Throughput Graph. Both the Zoomed Throughput Graph and the Timelines are synchronized with the Throughput Graph’s viewport.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data The largest value in each technology in the Zoomed Throughput Graph is snapped to the top of the graph. This makes the graph easier to read by using all of the available space, but because the y-axis scales can change it can make it difficult to compare different time ranges or durations.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Interval Menu The Interval drop-down menu is used to set the duration of each data point in the Zoomed Throughput graph. The default setting is Auto that sets the data point interval automatically depending on the zoom level. The other menu selections provide the ability to select a fixed data point interval. Selecting from a larger to a smaller interval will display more data points.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.63 - 802.11 Source Address Dialog Figure 4.64 - 802.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.3.3.6 Coexistence View - Throughput Radio Buttons The radio buttons in the Throughput group specify whether to show packet and/or payload lines in the Throughput Graph, and also whether to show packet or payload throughput in the throughput indicators (if the Both radio button is selected, packet throughput is shown in the throughput indicators). 4.3.3.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data The legend describes the color-coding used by packets in the timelines. Selecting a packet in a timeline highlights the applicable entries in the legend. An entry is bold if any such packets currently exist. Clicking on a bold entry enables the black legend navigation arrows in the toolbar for that entry. 4.3.3.10 Coexistence View – Timelines (Click here to see a Coexistence View Timeline video...) Figure 4.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY The height of Classic Bluetooth and Bluetooth low energy packets indicates their frequency range (1 MHz and 2 MHz respectively). Since 802.11 channels are so wide (22 MHz), 802.11 packets are drawn with an arbitrary 1 MHz height and centered within a separate frequency range box which indicates the actual frequency range.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.71 - Descriptive text on timeline packets. Placing the mouse pointer on a packet displays a tooltip (color-coded by technology) that gives detailed information. Figure 4.72 - A tool tip for a Classic Bluetooth packet. You can relocate the tool tip for convenience or to see the timeline or throughput graph unobstructed while displaying packet information.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.74 - Coexistence View Timeline Tool Tip Shown Anchored to Computer Screen There are two Timelines available for viewing, one for the 5 GHz range and one for the 2.4 GHz range. Classic Bluetooth and Bluetooth low energy occur only in the 2.4 GHz range. 802.11 can occur in both.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.75 - 5 GHz and 2.4 GHz 802.11 packets The y-axis labels show the channels for each technology and are color-coded: Blue = Classic Bluetooth, Green = Bluetooth low energy, Orange = 802.11. The 5 GHz timeline has only 802.11 channel labels, and the rows alternate orange and white, one row per channel. The 2.4 GHz timeline has labels for all three technologies. The rows alternate blue and white, one row per Classic Bluetooth channel.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.76 - 5 GHz information window Figure 4.77 - 2.4 GHz information windows When zoomed in far enough Bluetooth slot markers appear in the 2.4 GHz timeline. A Bluetooth slot is 625 µs wide. Figure 4.78 - Vertical blue lines are Bluetooth slot markers 1. Drag one of the sides of the Throughput Graph viewport. 2. Select a zoom preset from the Zoom or right-click menus. 3. Select the Zoom In or Zoom Out button or menu item.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4. Turn the mouse wheel in the Timelines or the Zoomed Throughput Graph while the zoom cursor is selected. The action is the same as selecting the Zoom In and Zoom Out buttons and menu items except that the time point at the mouse pointer is kept in place if possible. 5. Select the Zoom to Data Point Packet Range menu item, which zooms to the packet range shown in the most recently displayed tool tip. 6.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.80 - A positive discontinuity When there are one or more discontinuities the actual time encompassed by the visible timeline differs from the zoom level duration that would apply in the absence of any discontinuities. The actual time, referred to as absolute time, is shown followed by “(abs)”. The zoom level duration, referred to as relative time, is shown followed by “(rel)”.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.83 - High-speed Bluetooth packets have a blue frequency box and a two-tone tool tip 4.3.3.11 Coexistence View - No Packets Displayed with Missing Channel Numbers Note: This topic applies only to Classic Bluetooth. Captured packets that don’t contain a channel number, such as HCI and BTSnoop, will not be displayed.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 4.3.3.12 High Speed Live View When using the Frontline® 802.11 in conjunction with other ComProbe devices, or in a stand-alone configuration, a smaller version of the standard Coexistence View is available. This High Speed Live View is essentially the Viewport from the standard Coexistence View. When viewing High Speed Live, only 802.11 traffic is visible. Because Bluetooth packets are slow they are not visible in High Speed mode. 1.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY The Coexistence View (High Speed Live Mode) window will appear. Figure 4.85 - High-Speed Live Window 4.3.4 Message Sequence Chart (MSC) The Message Sequence Chart (MSC) displays information about the messages passed between protocol layers. MSC displays a concise overview of a Blutetooth connection, highlighting the essential elements fo the connection.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.86 - Message Sequence Chart Window How do I access the chart? You access the Message Sequence Chart by selecting the icon or MSC Chart from the View menu from the Control window or Frame Display. What do I see on the dialog? At the top of the dialog you see four icons that you use to zoom in and out of the display vertically and horizontally. The same controls are available under the View menu.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.87 - Classic and LE tabs If the Classic tab is selected, you will see Classic protocols. If you select the LE tab, you will see LE Protocols. If there is only Classic or only LE, the Classic and LE tabs will not appear. Also along the top of the dialog are a series of protocol tabs. The tabs will vary depending on the captured protocols. Clicking on a tab displays the messaging between the master and slave for that protocol.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data When you select Show all Layers, the chart will display all the messaging layers. The Frame# and Time of the packets are displayed on the left side of the chart. Figure 4.88 - Frame# and Time Display, inside red box. If you click on the description of the message interaction, the corresponding information is highlighted in Frame Display. Figure 4.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.90 - Control and Signaling Frames Summay The frame numbered is shown, whether the message comes from the Master or Slave, the message Address, the message itself, and the timestamp. Additionally, the control/signaling packets for each layer are shown in a different background color. Figure 4.91 - Packet Layers Shown in Different Colors If you right click within the Ctrl Summary, you can select Show in MSC. Figure 4.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.93 - MSC View of Selected Packet from Ctrl Summary You can return to the text version by using a right click and selecting Show in Text. Figure 4.94 - Return to Text View Using Right-Click Menu You can also choose to show: l Frame # only l Time only l Show both Frame# and Time l Hide both Frame# and Time 4.3.4.1 Message Sequence Chart Toolbar Figure 4.95 - Message Sequence Chart Toolbar Table 4.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Table 4.10 - Message Sequence Chart Tools (continued) Tool Keyboard Description Shift + H Zoom out horizontal - compresses the chart horizontal view Ctrl + V Zoom in vertical - expands the chart vertical view Shift + V Zoom out vertical - compresses the chart vertical view Shift + F Go to frame F3 Search F2 Search for prior Search F4 search for Next criteria. criteria.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data When you select the 1) Search icon or 2) use F3 key, the Select layer and message dialog appears. From this dialog you can search for specific protocol messages or search for the first error frame. 1. On the MSC dialog select one of the protocol tabs at the top. Note: If you select All Layers in Step 1, the Protocol Layers drop-down list is active. If you select any of the other single protocols, the Protocol Layers drop-down is grayed out. 2.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY In addition to Search, you can also locate specific frames by clicking on the Go To Frame 1. Click Go To Frame toolbar icon. in the toolbar. 2. Enter a frame number in the Enter frame No.: text box. 3. Click OK. The Go To Frame dialog disappears and the selected frame is highlighted in the chart.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data 4.3.4.5 Message Sequence Chart - Printing There are three standard MSC print buttons. Print Preview, Print, and Cancel Printing. Print Preview 1. When you select Print Preview , the Print Setup dialog appears. 2. You next need to select your printer from the drop-down list, set printer properties, and format the print output.. 3. Then you select OK. After you select OK, the Message Sequence Chart Print Preview dialog appears. Figure 4.
Chapter 4 Capturing and Analyzing Data Icon TELEDYNE LECROY Table 4.11 - Print Preview Icons (Continued) Name Description Zoom In Horizontially Expands the data horizontally so it can be easier to read. Zoom Out Horizontally Squeezes the data together so that more fits on one page. Zoom In Vertically Expands the data vertically so it can be easier to read. Zoom Out Vertically Squeezes the data so that more fits on one page.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data You can access this window in Bluetooth low energy by selecting the Bluetooth low energy Packet Error Rates Statistics icon from the Control window or Frame Display. You can also open the window from the View menu on the same windows. Bluetooth low energy Packet Error Rate Figure 4.99 - Bluetooth low energy PER Stats Window 4.4.1 Packet Error Rate - Channels The main portion of the PER Stats dialog displays the .
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.100 - Bluetooth low energy Packet Error Rate Channels l l l l l The red number at the top of the channel shows the percentage of Header Error and Payload/CRC Errors in relationship to the total number of packets in the channel. The light blue number at the top of each channel shows the megahertz (MHz) for the channel if the option is chosen in the Additional Statistics section.
TELEDYNE LECROY l Chapter 4 Capturing and Analyzing Data The Reset button is only available in live mode. The button will appear in the lower right-hand corner of the Channels section. Clicking on the Reset button will clear all prior data from PER Stats. 4.4.2 Packet Error Rate - Pie Chart and Expanded Chart The Expanded PER Stats Chart (in the upper right ) displays detailed information about the channel selected from the main channel dialog.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.4.3 Packet Error Rate - Legend The Legend displays color coded information about the channel selected. Bluetooth low energy For Bluetooth low energy: l l l The number of Packets with No Errors and percentage of packets with No Errors in relationship to total packets for the channel is displayed in green.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Channel 33 is snapped to the top of the chart. The channel(s) with the greatest value become a full-scale reference display for the other channels that have been relatively scaled. Channel comparisons become easier. With Snap On you can select multiple time values in the Scroll Bar.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4. Enter a file name in "File name:". 5. Select "Save". The file will be saved to that location. 4.4.7 Packet Error Rate - Scroll Bar The PER Stats Scroll Bar displays stats for all packets, divided into equal time intervals. Figure 4.102 - PER Stats Scroll Bar l l l l l l l l Captured data begins to appear on the left and fills the width of the bar, left to right. The vertical bars in the Scroll Bar each indicate a fixed duration.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data l The Home key moves the Viewport to the left edge. l The End key moves the Viewport to the right edge. l Pressing the left arrow button , the left arrow key, or the up arrow key moves the Viewport to the left, one vertical bar at a time. l Pressing the right arrow button . the right arrow key, or the down arrow key moves the Viewport to the right, one vertical bar at a time.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY Figure 4.103 - Event Display Click on an event to find out more about it. The three status lines at the bottom of the window are updated with information such as the time the event occurred (for data bytes, the time the byte was captured), the value of the byte in hex, decimal, octal, and binary, any errors associated with the byte, and more. Events with errors are shown in red to make them easy to spot.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Save - Prompts user for a file name. If the user supplies a name, a .cfa file is saved. Clear- Discards the temporary file and clears the display. MSC Chart - Opens the Message Sequence Chart Lock - In the Lock state, the window is locked so you can review a portion of data. Data capture continues in the background. Clicking on the Lock icon unlocks the window.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY All Events - Controls whether the analyzer shows all events in the window, or only data bytes. Events include control signal changes and framing information. Timestamping Options – Brings up the timestamping options window which has options for customizing the display and capture of timestamps. 4.5.3 Opening Multiple Event Display Windows Click the Duplicate View icon from the Event Display toolbar to open a second Event Display window.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.104 - Delta fields 4.5.6 Switching Between Live Update and Review Mode The Event Display and Frame Display windows can update to display new data during live capture, or be frozen to allow data analysis. By default, the Event Display continually updates with new data, and the Frame Display is locked. 1. Make sure the Lock icon 2. Click the Unlock is active so the display is locked and unable to scroll. icon again to resume live update.
Chapter 4 Capturing and Analyzing Data Click on the Display All Events icon TELEDYNE LECROY to remove the non-data events. Click again to display all events. See on page 153 for a list of all the special events shown in the analyzer and what they mean. 4.5.7.2 Switching Between Hex, Decimal, Octal or Binary On the Event Display window the analyzer displays data in Hex by default. There are several ways to change the radix1 used to display data. Go to the Format menu and select the radix you want.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.107 - Data display right click menu If you want to see only the numerical values, click on the Numbers Only icon on the Event Display toolbar. 4.5.7.3 Switching Between ASCII, EBCDIC, and Baudot On the Event Display window, the analyzer displays data in ASCII by default when you click on the Characters Only icon . There are several ways to change the character set used to display data. 1.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 4.5.7.5 List of all Event Symbols By default, the Event Display shows all events1, which includes control signal changes, start and end of frame characters and flow control changes. If you want to see only the data bytes, click on the All Events button . Click again to display all events. Click on a symbol, and the analyzer displays the symbol name and sometimes additional information in the status lines at the bottom of the Event Display window.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Table 4.12 - Event Symbols (continued) Symbol Event Low Power - The battery in the ComProbe® is low. Short Break SPY Event (SPY Mode only) - SPY events are commands sent by the application being spied on to the UART. Start of Frame - Marks the start of a frame.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 1. Click on Event Display menu Options, and select Change the Font Size. Figure 4.108 - Event Display Options menu 2. Choose a font size from the list. Figure 4.109 - Event Display Font Size Selection 3. Click OK. 4.6 Data/Audio Extraction You use Data/Audio Extraction to pull out data from various decoded Bluetooth protocols.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.110 - Data/Audio Extraction Settings dialog 2. Choose a checkbox(es) on the left side of the dialog to identify from which profile(s) you want to extract data. It's important to note that if there is no data for the profile(s) you select, no extracted file is created. 3. If you want the file(s) to open automatically after they are extracted, select the Open File(s) After Extraction checkbox. Note: This does not work for SCO/eSCO. 4.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY 7. Select Extract. A Save As dialog appears. The application will assign a file name and file type for each profile you select in Step 1 above. The file type varies depending on the original profile. A separate file for each profile will be created, but only for those profiles with available data. 8. Select a location for the file. 9. Click Save. The Data Extraction Status and Audio Extraction Status dialogs appear.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.112 - Rename To in the bottom section of Data Extraction Status Then you can rename the file, adding a file type to attempt to open the file. When you are finished, select Close to close the dialogs.
Chapter 5 Navigating and Searching the Data The following sections describe how to navigate through the data and how to find specific data or packet conditions of interest to the user. 5.1 Find Capturing and decoding data within the ComProbe analyzer produces a wealth of information for analysis. This mass of information by itself, however, is just that, a mass of information. There has to be ways to manage the information.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data Find, as the name suggests, is a comprehensive search function that allows users to search for strings or patterns in the data or in the frame decode. You can search for errors, control signal changes, bookmarks, special events, time, and more. Once the information is located, you can easily move to every instance of the Find results. 5.1.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY Figure 5.3 - Find Decode Tab Side Restriction There are several options for error searching on the Decoder tab. l l Search For String in Decoder allows you to enter a string in the text box. You can use characters, hex or binary digits, wildcards or a combination of any of the formats when entering your string. Every time you type in a search string, the analyzer saves the search.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data Side Restrictions - Side Restriction means that the analyzer looks for a pattern coming wholly from the DTE or DCE side. If you choose to search without regard for data origin, the analyzer looks for a pattern coming from one or both sides. For example, if you choose to search for the pattern ABC and you choose to search without regard for data origin, the analyzer finds all three instances of ABC shown here.
Chapter 5 Navigating and Searching the Data 3. Click on the Find icon TELEDYNE LECROY or choose Find from the Edit menu. 4. Click on the Pattern tab of the Find dialog. Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. Figure 5.4 - Find Pattern Tab Figure 5.5 - Find Pattern Tab Side Restrictions Pattern allows you to enter a string in the text box.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data 3. When you have specified the pattern you want to use, click on the Find Next or Find Previous buttons to start the search from the current event. The result of the search is displayed in the in Frame Display and Event Display. Refer to Searching by Decode on page 160 for information on Side Restrictions 5.1.3 Searching by Time Searching with Time allows you search on timestamps on the data in Frame Display and Event Display window.
Chapter 5 Navigating and Searching the Data l l TELEDYNE LECROY Absolute - An absolute timestamp search means that the analyzer searches for an event at the exact date and time specified. If no event is found at that time, the analyzer goes to the nearest event either before or after the selected time, based on the "Go to the timestamp" selection.
TELEDYNE LECROY l l Chapter 5 Navigating and Searching the Data Timestamping can be turned on and off while data is being captured. As a result, the capture buffer may have some data with a timestamp, and some data without. When doing a search by timestamp, the analyzer ignores all data without a timestamp. The raw timestamp value is the number of 100-nanosecond intervals since the beginning of January 1, 1601. This is standard Windows time. 5.1.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY 4. To move forward or backward a set number of frames, type in the number of frames you want to move 5. Then click the Move Forward or Move Back button. To go to a particular event : 1. Select the Data Event Number or All Events Number radio button. 2. Type the number of the event in the box. 3. Click the Go To button. 4. To move forward or backwards through the data, type in the number of events that you want to move each time. 5.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data Figure 5.8 - Find Special Events tab 5. Check the event or events you want to look for in the list of special events. Use Check All or Uncheck All buttons to make your selections more efficient. 6. Click Find Next and Find Previous to move to the next instance of the event. Not all special events are relevant to all types of data. For example, control signal changes are relevant only to serial data and not to Ethernet data.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. Figure 5.9 - Find Signal tab. You will choose one qualifier—Searching for event where, then choose one or more control signals Control Signals The section with the check boxes allows you to specify which control signals the analyzer should pay attention to when doing the search.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data Click here to learn more about the Breakout Box and Pins 1 - 4. Searching for event where: l l The first three options are all fairly similar, and are described together.
Chapter 5 Navigating and Searching the Data o o TELEDYNE LECROY If the end of the buffer is reached before a match is found, the analyzer asks you if you want to continue searching from the beginning. If you want to be sure to search the entire buffer, place your cursor on the first event in the buffer. o Select one of the four radio buttons to choose the condition that must be met in the search o Select one or more of the checkboxes for Pin 1, 2, 3, or 4.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data Searching for event where The first three options are all fairly similar, and are described together. These options are searching for an event where: l one or more error conditions changed l one or more error conditions occurred l one or more error conditions were off (i.e. no errors occurred) Selecting Which Errors to Search The section with the check boxes allows you to choose which errors the analyzer should look for.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY To search for an exact state means that the analyzer finds events that exactly match the error conditions that you specify. l l l Select the This exactly describes the state radio button. This changes the normal check boxes to a series of radio buttons labeled On, Off and Don’t Care for each error. o On means that the error occurred o Off means that the error did not occur o Don’t Care means that the analyzer ignores that error condition.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data Figure 5.11 - Find Bookmark tab. There are several ways to locate bookmarks. l Select the bookmark you want to move to and click the Go To button. l Simply double-click on the bookmark. l Click the Move Forward and Move Back buttons to move through the frames to the bookmarks shown in the window. When the bookmark is found it is highlighted in the window. There are three ways to modify bookmarks: 1.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY 5.1.10 Subtleties of Timestamp Searching Timestamping can be turned on and off while data is being captured. As a result, the capture buffer may have some data with a timestamp, and some data without. When doing a search by timestamp, the analyzer ignores all data without a timestamp. Note: The raw timestamp value is the number of 100-nanosecond intervals since the beginning of January 1, 1601. This is standard Windows time. 5.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data Modify 1. Select the frame or event with the bookmark to be edited. 2. There are three ways to access the Add/Modfy Bookmark dialog. a. Select Add or Modify Bookmark from the Bookmarks menu on the Frame Display and Event Display' b. Select the Add or Modify Bookmark icon on one of the toolbars, or c. Right-click on the frame/event and choosing Modify Bookmark… on the selection. 3. Change the comment in the dialog box 4. Click OK.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY Figure 5.13 - Find Window Bookmark tab Used to Move Around With Bookmarks To delete a bookmark, select it and click the Delete button. To modify a bookmark, select it and click the Modify button. Click Remove All to delete all the bookmarks.
Chapter 6 Saving and Importing Data 6.1 Saving Your Data You can save all or part of the data that you have captured. You can also load a previously saved capture file, and save a portion of that file to another file. This feature is useful if someone else needs to see only a portion of the data in your capture file. On the Control window toolbar you can set up to capture a single file. Click here to see those settings. There are two ways to save portions or all of the data collected during a data capture.
TELEDYNE LECROY Chapter 6 Saving and Importing Data Figure 6.1 - Windows Save dialog 4. Type a file name in the File name box at the bottom of the screen. 5. Browse to select a specific directory. Otherwise your file is saved in the default capture file directory. 6. When you are finished, click OK. 6.1.2 Saving the Entire Capture File with Save Selection 1. If you are capturing data, click on the Stop icon to stop data capture. You cannot save data to file while it is being captured. 2.
Chapter 6 Saving and Importing Data TELEDYNE LECROY 6.1.3 Saving a Portion of a Capture File 1. If you are capturing data, click on the Stop icon to pause data capture. You cannot save data to a file while it is being captured. 2. Open the Event Display or Frame Display window, depending on whether you want to specify a range in bytes or in frames. 3. Select the portion of the data that you want to save.
TELEDYNE LECROY Chapter 6 Saving and Importing Data 2. Type your comments in the large edit box on the Notes window. The Cut, Copy, Paste features are supported from Edit menu and the toolbar when text is selected. Undo and Redo features are all supported from Edit menu and the toolbar 3. Click the thumbtack icon at the current cursor location. to keep the Notes window on top of any other windows. 4. When you're done adding comments, close the window. 5.
Chapter 6 Saving and Importing Data TELEDYNE LECROY 6.4.2 Importing Capture Files 1. From the Control window , go to the File menu and select Open Capture File or click on the Open icon on the toolbar. 2. Left of the File name text box, select from the drop-down list Supported File Types box to All Importable File Types or All Supported File Types (*.cfa, *.log, *.txt, *.csv, *.cap). Select the file and click Open.
TELEDYNE LECROY Chapter 6 Saving and Importing Data Print Background Colors Using Internet Explorer 1. Open the Tools menu on the browser menu bar 2. Select “Internet Options…” menu entry. 3. Click Advanced tab. 4. Check “Print background colors and images” under the Printing section 5.
Chapter 6 Saving and Importing Data TELEDYNE LECROY 5. Select the range of frames to include All or Selection in the Frame Range section of the Frame Display Print dialog. Choosing All prints up to 1000 frames from the buffer. Choosing Selection prints only the frames you select in the Frame Display window. 6. Selecting the Delete File deletes the temporary html file that was used during printing 7. Click the OK button.
TELEDYNE LECROY Chapter 6 Saving and Importing Data 6.5.2 Printing from the Event Display The Event Display Print feature provides the user with the option to print either the entire capture buffer or the current selection. When Print Preview is selected, the output displays in a browser print preview window where the user can select from the standard print options. The output file format is in html, and uses the Microsoft Web Browser Control print options for background colors and images (see below).
Chapter 6 Saving and Importing Data TELEDYNE LECROY Figure 6.4 - Event Display Print Dialog 3. Click the OK button. If you chose Print Preview, the system displays your data in a browser print preview display with options for printing such as page orientation and paper size. You can also use your Printer Preferences dialog to make some of these selections. When printing your data, the analyzer creates an html file and prints the path to the file at the bottom of the page.
TELEDYNE LECROY Chapter 6 Saving and Importing Data Figure 6.5 - Event Display Export Example: .csv file. How to Export Event Display Data to a File 1. Select Export Events from the File menu on the Event Display window to display the Event Display Export dialog. 2. Enter a file path and name, or click the browser button to display the Windows Save As dialog and navigate to the desired storage location. 3. Select a file type from the Save as type: drop-down List Menu on the Event Display Export dialog.
Chapter 6 Saving and Importing Data TELEDYNE LECROY Events Per Row: You can choose to display Multiple Events Per Row, but this method contains no timestamps. If you select One Event Per Row, you can display timestamps. multiple events or single events per row. Note: The raw timestamp value is the number of 100-nanosecond intervals since the beginning of January 1, 1601. This is standard Windows time. .
TELEDYNE LECROY Chapter 6 Saving and Importing Data Figure 6.6 - Example: .csv Event Display Export, Excel spreadsheet 6.6.2.1 Export Filter Out You can filter out data you don't want or need in your text file. (This option is available only for serial data.) In the Filter Out box, choose which side to filter out: the DTE data, the DCE data or neither side (don't filter any data.
Chapter 7 General Information 7.1 System Settings and Progam Options 7.1.1 System Settings Open the System Settings window by choosing System Settings from the Options menu on the Control window. To enable a setting, click in the box next to the setting to place a checkmark in the box. To disable a setting, click in the box to remove the checkmark. When viewing a capture file, settings related to data capture are grayed out.
TELEDYNE LECROY Chapter 7 General Information Single File Figure 7.1 - System Settings Single File Mode This option allows the analyzer to capture data to a file. Each time you capture the file you must provide a file name. The size of each file cannot larger than the number given in File Size (in K). The name of each file is the name you give it in the Name box followed by the date and time. The date and time are when the series was opened.
Chapter 7 General Information TELEDYNE LECROY You can accept these values, or you can enter a unique file size. But if you try to close the dialog after entering a value greater than the maximum or less than the minimum, you will see the following dialog. l Start up Opens the Program Start up Options window. Start up options let you choose whether to start data capture immediately on opening the analyzer. l Advanced Opens the Advanced System Options window.
TELEDYNE LECROY Chapter 7 General Information Figure 7.2 - Advanced System Options dialog l l l Driver Receive Buffer Size in Kbytes - This is the size of the buffer used by the driver to store incoming data. This value is expressed in Kbytes. Driver Action Queue Size In Operating System Pages - This is the size of the buffer used by the driver to store data to be transmitted. This value is expressed in operating system pages.
Chapter 7 General Information TELEDYNE LECROY Figure 7.3 - Start Up Options dialog l Don't start capturing immediately - This is the default setting. The analyzer begins monitoring data but does not begin capturing data until clicking the Start Capture icon on the Control, Event Display or Frame Display windows. l Start capturing to a file immediately - When the analyzer starts up, it immediately opens a capture file and begins data capture to it.
TELEDYNE LECROY Chapter 7 General Information Figure 7.4 - File Locations dialog 2. Select the default location you wish to change. 3. Click Modify. 4. Browse to a new location. Figure 7.5 - File Locations Browse dialog 5. Click OK. 6. Click OK when finished.
Chapter 7 General Information TELEDYNE LECROY If a user sets the My Decoders directory such that it is up-directory from an installation path, multiple instances of a personality entry may be detected, which causes a failure when trying to launch Frontline.
TELEDYNE LECROY Chapter 7 General Information Figure 7.6 - Example: Side Names Where "Slave" and "Master" are current 1. To open the Side Names dialog, choose Side Names… from the Options menu on the Control window. 2. To change a name, click on the name given in the Current Names column, and then click again to modify the name (a slow double-click). 3. Select OK to initiate the changes. The changes that have been made will not fully take effect for any views already open.
Chapter 7 General Information TELEDYNE LECROY Figure 7.7 - Timestamping Options dialog Enabling/Disabling Timestamp To enable timestamping click to make a check appear in the check box Store Timestamps (This time takes effect immediately). Removing the check will disable timestamping. Changing the Timestamp Resolution This option affects the resolution of the timestamp stored in the capture file. The default timestamp is 10 milliseconds.
TELEDYNE LECROY Chapter 7 General Information Storage Resolution box. Note: If you change the resolution, you need to exit the analyzer and restart in order for the change to take effect. Performance Issues with High Resolution Timestamp There are two things to be aware of when using high resolution timestamps. The first is that high resolution timestamps take up more space in the capture file because more bits are required to store the timestamp.
Chapter 7 General Information TELEDYNE LECROY When you select Display Relative Timestamp you can set the number of digits to display using the up or down arrows on the numeric list. Displaying Fractions of a Second 1. Choose System Settings from the Options menu on the Control window, and click the Timestamping Options button, or click the click the Timestamping Options icon Event Display from the window. 2.
TELEDYNE LECROY Chapter 7 General Information Frame Display windows. The analyzer can capture data with no windows other than the Control window open. l If you are still experiencing buffer overflows after trying all of the above options, then you need to use a faster PC. 7.2.2 BTSnoop File Format Overview The BTSnoop file format is suitable for storing Bluetooth® HCI traffic. It closely resembles the snoop format, as documented in RFC 1761.
Chapter 7 General Information TELEDYNE LECROY A 32-bit (4 octet) unsigned integer value representing the version of the packet capture file being used. This document describes version number 1. Datalink Type: A 32-bit (4 octet) field identifying the type of datalink header used in the packet records that follow. The datalink type codes are listed in the table below. Values 0 - 1000 are reserved, to maximize compatibility with the RFC1761 snoop version 2 format. Table 7.
TELEDYNE LECROY Chapter 7 General Information A 32-bit unsigned integer representing the length of the Packet Data field. This is the number of octets of the captured packet that are included in this packet record. If the received packet was truncated, the Included Length field is less than the Original Length field. Packet Flags Flags specific to this packet. Currently the following flags are defined: Bit No. Table 7.
Chapter 7 General Information TELEDYNE LECROY 7.2.3 Progress Bars The analyzer uses progress bars to indicate the progress of a number of different processes. Some progress bars (such as the filtering progress bar) remain visible, while others are hidden. The title on the progress bar indicates the process underway. 7.2.4 Event Numbering This section provides information about how events are numbered when they are first captured and how this affects the display windows in the analyzer.
TELEDYNE LECROY Chapter 7 General Information 7.2.5.2 Baudot Codes 7.2.5.3 EBCDIC Codes 7.2.5.4 Communication Control Characters Listed below in alphabetical order are the expanded text meanings for common ANSI communication control characters, and two-character system abbreviation for each one.
Chapter 7 General Information TELEDYNE LECROY characters between the two letters. This is to differentiate the abbreviations for a control character from a hex number. For example, the abbreviation for Form Feed is listed as F/F, to differentiate it from the hex number FF. Table 7.
TELEDYNE LECROY Chapter 7 General Information Table 7.3 - Communications Control Characters(continued) Abbreviation Control Character Text US US Unit Separator VT VT Vertical Tabulation 7.2.6 DecoderScript Overview The main purpose of this manual is to describe DecoderScript™, the language used in writing decoders. DecoderScript allows you to create new decoders or modify existing decoders to expand the functionality of your ComProbe protocol analyzer.
Chapter 7 General Information TELEDYNE LECROY The solution to this problem is to 1. define the mappings in a file and 2. then pre-loading the mapping using the ComProbe software. Creating handle-UUID mapping file Create a file named "ATT_Handle_UUID_Preload.ini' in the root directory of "C:\Users\Public\Public Documents\Frontline Test Equipment\My Decoders\", but the file can be located anywhere. Assume that you want to create a GATT service starting at handle 1.
TELEDYNE LECROY Chapter 7 General Information Instructional Videos Teledyne LeCroy provides a series of videos to assist the user and may answer your questions. These videos can be accessed at fte.com/support/videos.aspx. On this web page use the Video Filters sidebar to select instructional videos for your product.
Appendicies Appendix A: Application Notes Frontline BPA low energy Hardware & Software User Manual 211 210
TELEDYNE LECROY Appendicies Appendix A: Application Notes 211 A.1 Decrypting Encrypted Bluetooth® low energy 212 A.2 Bluetooth® low energy Security 222 A.
A.1 Decrypting Encrypted Bluetooth® low energy A.1.1 How Encryption Works in Bluetooth low energy Data encryption is used to prevent passive and active—man-in-the-middle (MITM) — eavesdropping attacks on a Bluetooth low energy link. Encryption is the means to make the data unintelligible to all but the Bluetooth master and slave devices forming a link.
TELEDYNE LECROY Appendicies transmitted from the responder and contains much of the same information as the initiators Pairing Request message thus confirming that a pairing is successfully negotiated. In the sample SMP decode, in the figure at the right, note the “keys” identified. Creating a shared, secret key is an evolutionary process that involves several intermediary keys. The resulting keys include, 1. IRK: 128-bit key used to generate and resolve random address. 2.
Appendicies TELEDYNE LECROY . Figure 3 - Responder Pairing Confirm Example (ComProbe Frame Display, BPA 600 low energy capture) The initiating device will generate a 128-bit random number that is combined with TK, the Pairing Request command, the Pairing Response command, the initiating device address and address type, and the responding device address and address type. The resulting value is a random number Mconfirm that is sent to the responding device by the Pairing Confirm command.
TELEDYNE LECROY Appendicies Figure 6 - Encryption Response from Slave, Example (ComProbe Frame Display, BPA 600 low energy capture) A.1.6 Encrypting The Data Transmission Data encryption begins with encrypting the link. The Session Key (SK) is created using a session key diversifier (SKD). The first step in creating a SK is for the master device to send Link Layer encryption request message (LL_ ENC_REQ) that contains the SKDmaster. The SKDmaster is generated using the LTK.
Appendicies TELEDYNE LECROY A.1.7.1 Setting up the BPA 600 1. Run the ComProbe Protocol Analysis Software and select Bluetooth Classic/low energy (BPA 600). This will bring up the BPA 600 datasource window. This is where the parameters are set for sniffing, including the devices to be sniffed and how the link is to be decrypted. 2. Select Devices Under Test tab on the Datasource window. 3. Click/select LE Only. 4.
TELEDYNE LECROY Appendicies A.1.7.2 Use Frame Display to View Encryption/Decryption Process A.1.7.2.1 Security Manager Protocol The Security Manager Protocol (SMP) controls the process for pairing and key distribution. The results of a pairing and key distribution can be observed in the ComProbe software Frame Display. Activate the Frame Display by clicking on the icon on the Control window toolbar. On the Frame Display low energy protocols are shown in light green tabs.
Appendicies TELEDYNE LECROY Figure 11 - SMP Key Distribution Frames A.1.7.2.2 Link Layer The Link Layer (LL) protocol manages the Bluetooth low energy radio transmissions and is involved in starting link encryption. To observe the decoded LL commands, click on the Frame Display LE LL tab, search for and select ControlPkt “LL_ENC_REQ”. This command should originate with Side 1, the initiator of the encryption link.
TELEDYNE LECROY Appendicies between the master and the slave devices at Frame# 39,591 and 39,600 respectively. Clicking on the MSC LE LL tab will show the process of encrypting a session link. Clicking on Frame# 39,617 displays the LL_ENC_REQ command from the master to the slave. In the MSC below this command you will see the data transferred that includes SKDmaster used to generate the LTK. At Frame# 39,623 the slave responds with LL_ENC_RSP sending SKDslave to generate LTK at the master.
Appendicies TELEDYNE LECROY Figure 15 - Decrypted Data Example (Frame# 39,723) Author: John Trinkle Publish Date: 9 April 2014 Revised: 23 May 2014 Frontline BPA low energy Hardware & Software User Manual 220
TELEDYNE LECROY 221 Appendicies Frontline BPA low energy Hardware & Software User Manual
A.2 Bluetooth® low energy Security "Paris is quiet and the good citizens are content." Upon seizing power in 1799 Napoleon sent this message on Claude Chappe’s optical telegraph. Chappe had invented a means of sending messages line-ofsight . The stations were placed approximately six miles apart and each station had a signaling device made of paddles on the ends of a rotating “regulator” arm whose positions represented code numbers.
TELEDYNE LECROY Appendicies Of course anyone positioned between the telegraph stations that had Chappe's telegraph code in hand could decode the transmission. So securing the code was of paramount importance in Chappe's protocol. Modern wireless networks such as Bluetooth low energy employ security measures to prevent similar potentially man-in-themiddle attacks that may have malicious intent. Bluetooth low energy devices connected in a link can pass sensitive data by setting up a secure encrypted link.
Appendicies TELEDYNE LECROY c. the Identity Resolving Key (IRK) used to generate a private address. Of primary interest in this paper is the LTK. CSRK and IRK are covered briefly at the end. Bluetooth low energy uses the same pairing process as Classic Bluetooth: Secure Simple Pairing (SSP). During SSP initially each device determines its capability for input and output (IO). The input can be None, Yes/No, or Keyboard with Keyboard having the ability to input a number.
TELEDYNE LECROY Appendicies Figure 19 - Initiator Pairing Confirm Example (ComProbe Frame Display, BPA 600 low energy capture) . Figure 20 - Responder Pairing Confirm Example (ComProbe Frame Display, BPA 600 low energy capture) The initiating device will generate a 128-bit random number that is combined with TK, the Pairing Request command, the Pairing Response command, the initiating device address and address type, and the responding device address and address type.
Appendicies TELEDYNE LECROY does not have the database storage resources for holding LTKs. Therefore the slave will distribute LTK, EDIV, and Rand to the master device for storage. When a slave begins a new encrypted session with a previously linked master device, it will request distribution of EDIV and Rand and will regenerate LTK. Figure 23 - Encryption Response from Slave, Example (ComProbe Frame Display, BPA 600 low energy capture) A.2.
TELEDYNE LECROY Appendicies the packet that includes a counter and a message authentication code (MAC). The key used to generate MAC is CSRK. Each peer device in a piconet will have a unique CSRK. The receiving device will authenticate the message from the trusted sending device using the CSRK exchanged from the sending device. The counter is initialized to zero when the CSRK is generated and is incremented with each message signed with a given CSRK.
A.3 Bluetooth Virtual Sniffing A.3.1 Introduction The ComProbe software Virtual sniffing function simplifiesBluetooth® development and is easy to use. Frontline’s Virtual sniffing with Live Import provides the developer with an open interface from any application to ComProbe software so that data can be analyzed and processed independent of sniffing hardware.
TELEDYNE LECROY Appendicies ComProbe software’s Virtual sniffing feature is a simple and easy way to perform HCI-sniffing. Virtual sniffing is not limited to just HCI-sniffing, but it is the most common use and this white paper will focus on the HCI-sniffing application of Virtual sniffing. It is also important to understand that ComProbe software is a multi-mode product. ComProbe software does support traditional air sniffing.
Appendicies TELEDYNE LECROY Not only is there a physical tap in traditional sniffing, but the sniffer must have some knowledge of the physical characteristics of the link being sniffed. For example, a Bluetooth air sniffer must know the BD_ADDR of at least one piconet member to allow it perform clock synchronization. A serial sniffer must know the bit rate of the tapped circuit or be physically connected to the clock line of the circuit.
TELEDYNE LECROY Appendicies there are interoperability issues that must be dealt with. The homegrown hex dumps and trace tools from the early days of Bluetooth just are not good enough anymore. And building a good protocol analyzer is not easy. So stack vendors are partnering with Frontline. This permits the stack vendors to concentrate of improving their stack. The typical Bluetooth stack vendor provides a Windows-based SDK.
Appendicies TELEDYNE LECROY If you are end customer and you want to take advantage of Virtual sniffing, all you need to do is buy any Frontline Bluetooth product. Virtually sniffing comes standard with product.
TELEDYNE LECROY Appendicies Author: Eric Kaplan Publish Date: May 2003 Revised: December 2013 233 Frontline BPA low energy Hardware & Software User Manual
Appendicies Frontline BPA low energy Hardware & Software User Manual Index Binary 151, 163 Binary Pane 59 A BL 206 A2DP Decoder Parameters 24 Bookmarks 175-176 Aborted Frame 193 Boolean 65, 70 About Display Filters 62 BPA low energy; I/O Settings 14 About L2CAP Decoder Parameters 24 Broken Frame 153 Absolute Time 199 BS 206 Adaptive Frequency Hopping BT Snoop File Format 201 PER Stats 141 Btsnoop 201 Add a New or Save an Existing Template 23 Buffer 179, 190 Adding a New Predefined Stac
Frontline BPA low energy Hardware & Software User Manual Appendicies saving 179-180 high-speed 126 starting capture to file 33 packet 118 Capturing 33 two timelines 122 Data to Disk 33 Toolbar 104 CFA file 180-181 Tooltip 110 Changing Default File Locations 194 relocate 110, 120 Character 163, 205 Color of Data Bytes 61 Character Pane 59 Colors 61 Character Set 152, 204-205 Comma Separated File 186 Choosing a Data Capture Method 3 Compound Display Filters 65 Clear Capture Buffer 190 C
Appendicies Frontline BPA low energy Hardware & Software User Manual Data 149, 178-179 EBCDIC 152 Capturing 33 EBCDIC Codes 205 Data Byte Color Denotation 61 EIR 35 Data Errors 171 EM 205 Data Extraction 155 EQ 206 Data Rates 149 Errors 61, 78, 171, 196 Decimal 151 ET 205 Decode Pane 58 Event Display 50, 146, 186 decoder 207 Event Display Export 186 Decoder Parameters 20 Event Display Toolbar 147 DecoderScript 207 Event Numbering 204 Decodes 20, 36, 41, 48, 58, 160 Event Pane 60 de
Frontline BPA low energy Hardware & Software User Manual Appendicies Filtering 76 Importable File Types 182 Filters 62-65, 67-70, 77 Importing Capture Files 181 Find 160, 163-164, 166-167, 171 INCLUDE 64 Find - Bookmarks 173 Include/Exclude 64 Find Introduction 159 L Font Size 154 L2CAP 24 Frame Display 41, 44, 47-48, 50-51, 57-61 L2CAP Override Decode Information 26 Frame Display - Change Text Highlight Color 60 Layer Colors 61 LF 206 Frame Display - Find 48 Live Update 150 Frame Displa
Appendicies Frontline BPA low energy Hardware & Software User Manual Modem Lead Names 196 Printing 185 Modify Display Filters 69-70 Printing from the Frame Display 182 Multiple Event Displays 149 Progress Bars 204 Multiple Frame Displays 51 Protocol N Protocol Layer Colors 61 NK 206 Protocol Layer Filtering 76 Node Filters 67 Protocol Stack 37-38, 40 Nonprintables 189 Q Notes 180 Quick Filtering 76, 78 NU 205 R Number Set 151 Radix 59, 151 Numbers 204 Red Frame Numbers 61 O Reframe
Frontline BPA low energy Hardware & Software User Manual Appendicies Save As 178 Synchronization 50 Saving 179-180 System Settings 190, 192 Display Filter 63 T Imported Capture Files 190 Technical Support 208 Saving the Capture File using File > Save or the Save icon 178 Test Device Began Responding 154 Test Device Stopped Responding 154 Search 160, 162, 164, 166-167, 171, 174-176 Timestamp 175, 198-199 binary value 162 Timestamping 175, 197, 199 bookmarks 176 Timestamping Disabled 154
