BPA Low Energy Manual Datasheet by Teledyne LeCroy

I ‘ TELEDYNE LECHOY ‘~ Everywhereyoulook‘ "90‘th B PA low energy ELLIE'I'OO'I'H“a PROTOCOL ANALYZER
Hardware and Software User Manual
Revision Date: 1/3/2017
Copyright © 2017 Teledyne LeCroy, Inc.
FTS, Frontline, Frontline Test System, ComProbe Protocol Analysis System and ComProbe are registered
trademarks of Teledyne LeCroy, Inc.
The Bluetooth SIG, Inc. owns the Bluetooth® word mark and logos, and any use of such marks by Teledyne
LeCroy, Inc. is under license.
All other trademarks and registered trademarks are property of their respective owners.
TELEDYNE LECROY
i Frontline BPA low energy Hardware & Software User Manual
Contents
Chapter 1 Frontline Hardware & Software 1
1.1 What is in this manual 2
1.2 Computer Minimum System Requirements 2
1.3 Software Installation 2
Chapter 2 Getting Started 3
2.1 BPA low energy Hardware 3
2.2 Data Capture Methods 3
2.2.1 Opening Data Capture Method 3
2.2.2 Frontline® BPA low energy Data Capture Methods 5
2.3 Control Window 6
2.3.1 Control Window Toolbar 7
2.3.2 Configuration Information on the Control Window 7
2.3.3 Status Information on the Control Window 8
2.3.4 Frame Information on the Control Window 8
2.3.5 Control Window Menus 8
2.3.6 Minimizing Windows 12
Chapter 3 Configuration Settings 13
3.1 BPAle I/O Settings - Datasource 13
3.1.1 BPA Low Energy datasource Toolbar/Menu 13
3.1.2 BPA low energy Devices Under Test 14
3.1.3 BPA Low Energy LE Device Database 16
3.1.4 BPA low energy Datasource Information 18
3.1.5 BPA low energy Update Firmware 18
3.2 Decoder Parameters 19
3.2.1 Decoder Parameter Templates 21
3.2.2 Selecting A2DP Decoder Parameters 23
3.2.3 L2CAP Decoder Parameters 23
3.2.4 RFCOMM Decoder Parameters 25
Chapter 4 Capturing and Analyzing Data 29
4.1 Capture Data 29
4.1.1 Air Sniffing: Positioning Devices 29
4.1.2 Capturing Data to Disk - General Procedure 31
4.1.3 Extended Inquiry Response 33
TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual ii
4.2 Protocol Stacks 34
4.2.1 Protocol Stack Wizard 34
4.2.2 Creating and Removing a Custom Stack 35
4.2.3 Reframing 36
4.2.4 Unframing 36
4.2.5 How the Analyzer Auto-traverses the Protocol Stack 37
4.2.6 Providing Context For Decoding When Frame Information Is Missing 37
4.3 Analyzing Protocol Decodes 38
4.3.1 The Frame Display 38
4.3.2 low energy Timeline 73
4.3.3 Coexistence View 90
4.3.4 Message Sequence Chart (MSC) 118
4.4 Packet Error Rate Statistics 127
4.4.1 Packet Error Rate - Channels 128
4.4.2 Packet Error Rate - Pie Chart and Expanded Chart 129
4.4.3 Packet Error Rate - Legend 130
4.4.4 Packet Error Rate - Additional Statistics 130
4.4.5 Packet Error Rate - Sync Selected Packets With Other Windows 131
4.4.6 Packet Error Rate - Export 131
4.4.7 Packet Error Rate - Scroll Bar 132
4.5 Analyzing Byte Level Data 133
4.5.1 Event Display 133
4.5.2 The Event Display Toolbar 134
4.5.3 Opening Multiple Event Display Windows 136
4.5.4 Calculating CRCs or FCSs 136
4.5.5 Calculating Delta Times and Data Rates 136
4.5.6 Switching Between Live Update and Review Mode 137
4.5.7 Data Formats and Symbols 137
4.6 Data/Audio Extraction 141
Chapter 5 Navigating and Searching the Data 145
5.1 Find 145
5.1.1 Searching within Decodes 146
5.1.2 Searching by Pattern 148
5.1.3 Searching by Time 149
TELEDYNE LECROY
iii Frontline BPA low energy Hardware & Software User Manual
5.1.4 Using Go To 151
5.1.5 Searching for Special Events 153
5.1.6 Searching by Signal 154
5.1.7 Searching for Data Errors 156
5.1.8 Find - Bookmarks 159
5.1.9 Changing Where the Search Lands 160
5.1.10 Subtleties of Timestamp Searching 160
5.2 Bookmarks 161
5.2.1 Adding, Modifying or Deleting a Bookmark 161
5.2.2 Displaying All and Moving Between Bookmarks 162
Chapter 6 Saving and Importing Data 164
6.1 Saving Your Data 164
6.1.1 Saving the Entire Capture File 164
6.1.2 Saving the Entire Capture File with Save Selection 165
6.1.3 Saving a Portion of a Capture File 166
6.2 Adding Comments to a Capture File 166
6.3 Confirm Capture File (CFA) Changes 167
6.4 Loading and Importing a Capture File 167
6.4.1 Loading a Capture File 167
6.4.2 Importing Capture Files 168
6.5 Printing 168
6.5.1 Printing from the Frame Display/HTML Export 168
6.5.2 Printing from the Event Display 171
6.6 Exporting 172
6.6.1 Frame Display Export 172
6.6.2 Exporting a File with Event Display Export 172
Chapter 7 General Information 176
7.1 System Settings and Progam Options 176
7.1.1 System Settings 176
7.1.2 Changing Default File Locations 179
7.1.3 Side Names 181
7.1.4 Timestamping 182
7.2 Technical Information 184
7.2.1 Performance Notes 184
TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual iv
7.2.2 BTSnoop File Format 185
7.2.3 Progress Bars 187
7.2.4 Event Numbering 188
7.2.5 Useful Character Tables 188
7.2.6 DecoderScript Overview 190
7.2.7 Bluetooth low energy ATT Decoder Handle Mapping 191
Contacting Technical Support 192
Appendicies 194
Appendix A: Application Notes 195
A.1 Decrypting Encrypted Bluetooth® low energy 196
A.1.1 How Encryption Works in Bluetooth low energy 196
A.1.2 Pairing 196
A.1.3 Pairing Methods 197
A.1.4 Encrypting the Link 198
A.1.5 Encryption Key Generation and Distribution 198
A.1.6 Encrypting The Data Transmission 199
A.1.7 Decrypting Encrypted Data Using Frontline® BPA 600 low energy Capture 199
A.2 Bluetooth® low energy Security 204
A.2.1 How Encryption Works in Bluetooth low energy 205
A.2.2 Pairing 205
A.2.3 Pairing Methods 206
A.2.4 Encrypting the Link 207
A.2.5 Encryption Key Generation and Distribution 207
A.2.6 Encrypting The Data Transmission 208
A.2.7 IRK and CSRK Revisited 208
A.2.8 Table of Acronyms 209
A.3 Bluetooth Virtual Sniffing 210
A.3.1 Introduction 210
A.3.2 Why HCI Sniffing and Virtual Sniffing are Useful 210
A.3.3 Bluetooth Sniffing History 211
A.3.4 Virtual Sniffing—What is it? 211
A.3.5 The Convenience and Reliability of Virtual Sniffing 212
A.3.6 How Virtual Sniffing Works 212
A.3.7 Virtual Sniffing and Bluetooth Stack Vendors 212
TELEDYNE LECROY
v Frontline BPA low energy Hardware & Software User Manual
A.3.8 Case Studies: Virtual Sniffing and Bluetooth Mobile Phone Makers 213
A.3.9 Virtual Sniffing and You 213
TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual vi
I ‘ TELEDYNE LECHDY I. Everywhereyoulook' Frontline Technical Support Team
Chapter 1 Frontline Hardware & Software
Frontline Test Equipment family of protocol analyzers work with the following technologies.
lClassic Bluetooth
lBluetooth low energy (BPA LE supports Bluetooth low energy features through Bluetooth 4.2, except
optional extended packet length.)
lDual Mode Bluetooth (simultaneous Classic and low energy)
lBluetooth Coexistence: Bluetooth with 802.11 Wi-Fi
lBluetooth HCI (USB, SD, High Speed UART)
lNFC
l802.11 (Wi-Fi)
lSD
lHSU (High Speed UART)
The Frontline hardware interfaces with your computer that is running our robust software engine called the
ComProbe Protocol Analysis System or Frontline software. Whether you are sniffing the air or connecting
directly to the chip Frontline analyzers use the same powerful Frontline software to help you test,
troubleshoot, and debug communications faster.
Frontline software is an easy to use and powerful protocol analysis platform. Simply use the appropriate
Frontline hardware or write your own proprietary code to pump communication streams directly into the
Frontline software where they are decoded, decrypted, and analyzed. Within the Frontline software you see
packets, frames, events, coexistence, binary, hex, radix, statistics, errors, and much more.
This manual is a user guide that takes you from connecting and setting up the hardware through all of the
Frontline software functions for your Frontline hardware. Should you have any questions contact the
Frontline Technical Support Team.
Frontline BPA low energy Hardware & Software User Manual 1
1.1 What is in this manual
The Frontline User Manual comprises the following seven chapters. The chapters are organized in the
sequence you would normally follow to capture and analyze data: set up, configure, capture, analyze, save.
You can read them from beginning to end to gain a complete understanding of how to use the Frontline
hardware and software or you can skip around if you only need a refresher on a particular topic. Use the
Contents, Index, and Glossary to find the location of particular topics.
lChapter 1 Frontline Hardware and Software. This chapter will describe the minimum computer
requirements and how to install the software.
lChapter 2 Getting Started. Here we describe how to set up and connect the hardware, and how to apply
power. This chapter also describes how to start the Frontline software in Data Capture Methods. You will
be introduced to the Control window that is the primary operating dialog in the Frontline software.
lChapter 3 Configuration Settings. The software and hardware is configured to capture data. Configuration
settings may vary for a particular Frontline analyzer depending on the technology and network being
sniffed. There are topics on configuring protocol decoders used to disassemble packets into frames and
events.
lChapter 4 Capturing and Analyzing Data. This Chapter describes how to start a capture session and how
to observe the captured packets, frames, layers and events.
lChapter 5 Navigating and Searching the Data. Here you will find how to move through the data and how
to isolate the data to specific events, often used for troubleshooting device design problems.
lChapter 6 Saving and Importing Data. When a live capture is completed you may want to save the
captured data for future analysis, or you may want to import a captured data set from another developer
or for use in interoperability testing. This chapter will explain how to do this for various data file formats.
lChapter 7 General Information. This chapter provides advanced system set up and configuration
information, timestamping information, and general reference information such as ASCII, baudot, and
EBCDIC codes. This chapter also provides information on how to contact Frontline's Technical Support
team should you need assistance.
1.2 Computer Minimum System Requirements
Frontline supports the following computer systems configurations:
lOperating System: Windows 7/8/10
lUSB Port: USB 2.0 High-Speed or or later
The Frontline software must operate on a computer with the following minimum characteristics.
lProcessor: Core i5 processor at 2.7 GHz
lRAM: 4 GB
lFree Hard Disk Space on C: drive: 20 GB
1.3 Software Installation
Download the installation software from FTE.com. Once downloaded, double-click the installer and follow the
directions.
Use this link: http://www.fte.com/bpale-soft.
TELEDYNE LECROY Chapter 1 Frontline Hardware & Software
2 Frontline BPA low energy Hardware & Software User Manual
I ‘ TELEDVNE LECRDY I. Everywhereyoulook‘
Chapter 2 Getting Started
In this chapter we introduce you to the Frontline hardware and show how to start the Frontline analyzer
software and explain the basic software controls and features for conducting the protocol analysis.
2.1 BPA low energy Hardware
1. Insert the USB cable mini-connector into the USB port on the Frontline BPA low energy hardware.
2. Insert the other end of the USB cable into the PC.
Figure 2.1 - BPA low energy Hardware USB Port
2.2 Data Capture Methods
This section describes how to load TELEDYNE LECROY Frontline Protocol Analysis System software, and how
to select the data capture method for your specific application.
2.2.1 Opening Data Capture Method
On product installation, the installer creates a folder on the windows desktop labeled "Frontline <version #>".
1. Double-click the " Frontline <version #>" desktop folder
This opens a standard Windows file folder window.
Frontline BPA low energy Hardware & Software User Manual 3
.lfl > antlme (umvrube Protocol Analyili System 12 11 56M , ' Include in Illnaly ' Shave with 7 Burn New folder ring A NE NE shnp m Development Tools wnlnads fl Bowman cult Places 3 Mamtmrlce Tools iogle Drive fit Capture Fil: Vuwer ED Comprobe 802.11 mm Mlfihllk «s _ itumnts m nowmw Select to open Capture Methods Note' You can also access this dialog by selecting Start > All Programs > Frontline (Version #) > Frontline ComProbe Protocol Analysis System sum um Lame "mm... X w a: Warm New? Realm me camera" EPA sun mm: 0 Bluelaalh [lawn/law energy [EPA mm B 5 Viilual Smiling 9 ms side a lEEEHmSo umlm lwical nPDllwliom lo mm combinedaluebulh mum and law mew dale Connected be as Eieale Sharlcul when Run Run Hap
Figure 2.2 - Desktop Folder Link
2. Double-click on Frontline ComProbe Protocol Analysis System and the system displays the Select
Data Capture Method... dialog.
Note: You can also access this dialog by selecting Start > All Programs > Frontline
(Version #) > Frontline ComProbe Protocol Analysis System
Figure 2.3 - Example: Select Data Capture Method..., BPA 600
Three buttons appear at the bottom of the dialog; Run,Cancel, and Help.
TELEDYNE LECROY Chapter 2 Getting Started
4 Frontline BPA low energy Hardware & Software User Manual
Note: If you don‘t need to identify a capture method, then click the Run button to start the analyzer. 1:] [male Shovtul when Hun
Button Description
Becomes active when a capture method is selected. Starts the selected capture
method.
Closes the dialog and exits the user back to the computer desktop.
Opens Frontline Help. Keyboard shortcut: F1.
Select Data Capture Method dialog buttons
3. Expand the folder and select the data capture method that matches your configuration.
4. Click on the Run button and the Frontline Control Window will open configured to the selected
capture method.
Note: If you don't need to identify a capture method, then click the Run button to start the
analyzer.
Creating a Shortcut
A checkbox labeled Create Shortcut When Run is located near the
bottom of the dialog. This box is un-checked by default. Select this
checkbox, and the system creates a shortcut for the selected method, and
places it in the "Frontline ComProbe Protocol Analysis System <version#>"
desktop folder and in the start menu when you click the Run button. This function allows you the option to
create a shortcut icon that can be placed on the desktop. In the future, simply double-click the shortcut to
start the analyzer in the associated protocol.
Supporting Documentation
The Frontline <version #>directory contains supporting documentation for development (Automation,
DecoderScript™, application notes), user documentation (Quick Start Guides and the Frontline User Manual),
and maintenance tools.
2.2.2 Frontline®BPA low energy Data Capture Methods
The Frontline Protocol Analysis System has different data capture methods to accommodate various
applications.
Chapter 2 Getting Started TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 5
”gamma-mum. 2’s \ ; a 8mm» w my 5mm awn an: Euanb: an w my had/w: m m mm: 0 ammmm ”LE" "4“" museum Umdh mmmm.“‘mmammmwuaa 9 ns 5.1. a mum Lannzded Dwmes m cm m 4m. may/mm" WWI-sum: Tm WWYW Hum-ermmnapumw Wash!“ .mm-vnuwS-defle) knead Manna Fov Mdp Pym F1 mm Decoder (0 pps)
Figure 2.4 - BPA low energy Select Data Capture Method
lBluetooth low energy
oThis method requires one Frontline BPA low energy hardware or one Frontline FBLEA hardware.
oUsed for typical applications to capture Bluetooth low energy data.
2.3 Control Window
The analyzer displays information in multiple windows, with each window presenting a different type of
information. The Control window opens when the Run button is clicked in the Select Data Capture
Method window. The Control window provides access to each Frontline analyzer functions and settings as
well as a brief overview of the data in the capture file. Each icon on the toolbar represents a different data
analysis function.
Figure 2.5 - Control Window
Because the Control window can get lost behind other windows, every window has a Home icon that
brings the Control window back to the front. Just click on the Home icon to restore the Control window.
When running the Capture File Viewer, the Control window toolbar and menus contain only those
selections needed to open a capture file and display the About box. Once a capture file is opened, the
analyzer limits Control window functions to those that are useful for analyzing data contained in the current
file. Because you cannot capture data while using Capture File Viewer, data capture functions are
unavailable. For example, when viewing Ethernet data, the Signal Display is not available. The title bar of the
Control window displays the name of the currently open file. The status line (below the toolbar) shows the
configuration settings that were in use when the capture file was created.
TELEDYNE LECROY Chapter 2 Getting Started
6 Frontline BPA low energy Hardware & Software User Manual
i$onaflfimlmuufim
2.3.1 Control Window Toolbar
Toolbar icon displays vary according to operating mode and/or data displayed. Available icons appear in color,
while unavailable icons are not visible. Grayed-out icons are available for the Frontline hardware and software
configuration in use but are not active until certain operating conditions occur. All toolbar icons have
corresponding menu bar items or options.
Icon Description
Open File - Opens a capture file.
I/O Settings - Opens settings
Start Capture - Begins data capture to disk
Stop Capture - Available after data capture has started. Click to stop data capture. Data can
be reviewed and saved, but no new data can be captured.
Save - Saves the capture file.
Clear - Clears or saves the capture file.
Event Display - (framed data only) Opens a Event Display, with the currently selected bytes
highlighted.
Frame Display - (framed data only) Opens a Frame Display, with the frame of the currently
selected bytes highlighted.
Notes - Opens the Notes dialog.
Cascade - Arranges windows in a cascaded display.
Low energy - Opens the low energy Timeline dialog.
MSC Chart - Opens the Message Sequence Chart
Bluetooth low energy Packet Error Rate Statistics - Opens the Packet Error Rate Statistics
window.
Table 2.1 - Control Window Toolbar Icons
2.3.2 Configuration Information on the Control Window
The Configuration bar (just below the toolbar) displays the hardware configuration and may include I/O
settings. It also provides such things as name of the network card, address information, ports in use, etc.
Chapter 2 Getting Started TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 7
Icantue status: .mActivflthuretosindeHe) MIA used‘thiizaunn: w. Host av. camel Evenlsm System Settings For Help Press F1 .cfa file.
2.3.3 Status Information on the Control Window
The Status bar located just below the Configuration bar on the Control window provides a quick look at
current activity in the analyzer.
lCapture Status displays Not Active, Paused or Running and refers to the state of data capture.
oNot Active means that the analyzer is not currently capturing data.
oPaused means that data capture has been suspended.
oRunning means that the analyzer is actively capturing data.
l% Used
The next item shows how much of the buffer or capture file has been filled. For example, if you are
capturing to disk and have specified a 200 Kb capture file, the bar graph tells you how much of the
capture file has been used. When the graph reaches 100%, capture either stops or the file begins to
overwrite the oldest data, depending on the choices you made in the System Settings.
lUtilization/Events
The second half of the status bar gives the current utilization and total number of events seen on the
network. This is the total number of events monitored, not the total number of events captured. The
analyzer is always monitoring the circuit, even when data is not actively being captured. These graphs
allow you to keep an eye on what is happening on the circuit, without requiring you to capture data.
2.3.4 Frame Information on the Control Window
Frame Decoder information is located just below the Status bar on the Control window. It displays two pieces
of information.
lFrame Decoder (233 fps) displays the number of frames per second being decoded. You can toggle this
display on/off with Ctrl-D, but it is available only during a live capture.
l#132911 displays the total frames decoded.
l100% displays the percentage of buffer space used.
2.3.5 Control Window Menus
The menus appearing on the Control window vary depending on whether the data is being captured live or
whether you are looking at a .cfa file. The following tables describe each menu.
Mode Selection Hot
Key Description
Live Close Closes Live mode.
Table 2.2 - Control Window File Menu Selections
TELEDYNE LECROY Chapter 2 Getting Started
8 Frontline BPA low energy Hardware & Software User Manual
Reframing on page 36 eeUnframing on page 36 Bluetooth low enegy Timeline window PER Stats window
Mode Selection Hot
Key Description
Capture
File
Go Live Returns to Live mode
Reframe If you need to change the protocol stack used to interpret a
capture file and the framing is different in the new stack, you
need to reframe in order for the protocol decode to be correct.
See Reframing on page 36
Unframe Removes start-of-frame and end-of-frame markers from your
data. SeeUnframing on page 36
Recreate
Companion File
This option is available when you are working with decoders. If
you change a decoder while working with data, you can
recreate the ".frm file", the companion file to the ".cfa file".
Recreating the ".frm file" helps ensure that the decoders will
work properly.
Reload Decoders The plug-ins are reset and received frames are decoded again.
Live &
Capture
File
Open Capture File Ctrl-
-O
Opens a Windows Open file dialog. at the default location
"...\Public Documents\Frontline Test Equipment\My Capture
Files\". Capture files have a .cfa extension.
Save Ctrl-
S
Saves the current capture or capture file. Opens a Windows
Save As dialog at the default location "...\Public
Documents\Frontline Test Equipment\My Capture Files\".
Exit ComProbe
Protocol Analysis
System
Shuts down the ComProbe Protocol Analysis System and all
open system windows.
Recent capture files A list of recently opened capture files will appear.
Table 2.2 - Control Window File Menu Selections (continued)
The View menu selections will vary depending on the Frontline analyzer in use.
Mode Selection Hot key Description
Live &
Capture
File
Event Display Ctrl-
Shift-E
Opens the Event Display window for analyzing byte level
data.
Frame Display Ctrl-
Shift-M
Opens the Frame Display window for analyzing protocol
level data
Bluetooth low
energy Timeline
Opens the Bluetooth low energy Timeline window for
analyzing protocol level data in a packet chronological
format and in packet throughput graph.
Bluetooth low
energy Packet Error
Rate Statistics
Opens the Bluetooth low energy PER Stats window to
show a dynamic graphical representation of the error rate
for each low energy channel.
Table 2.3 - Control Window View Menu Selections
Chapter 2 Getting Started TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 9
Notes window
Mode Selection Hot-
key Description
Capture
File
Notes Ctrl-
Shift-
O
Opens the Notes window that allows the user to add
comments to a capture file.
Table 2.4 - Control Window Edit Menu Selections
The Live menu selections will vary depending on the Frontline analyzer in use.
Mode Selection Hot-
Key Description
The following two rows apply to all Frontline products except Set in Target.
Live Start Capture Shift-
F5
Begins data capture from the configured wireless devices.
Stop Capture F10 Stops data capture from the configured wireless devices.
The following rows apply to all Frontline products
Live Clear Shift-
F10
Clears or saves the capture file.
Table 2.5 - Control Window Live Menu Selections
TELEDYNE LECROY Chapter 2 Getting Started
10 Frontline BPA low energy Hardware & Software User Manual
File Locations dialog Side Names dialog Select a Stack dialog Set Initial Decoder Parameters window Set Subsequent Decoder Parameters dialog dialog Audio Expert System
Mode Selection Hot-
Key Description
Live &
Capture
File
Hardware Settings 0 - Classic
1 - Bluetooth low energy
I/O Settings 0 - Classic
1 - Bluetooth low energy
System Settings Alt-
Enter
Opens the System Settings dialog for configuring capture
files.
Directories... Opens the File Locations dialog where the user can change
the default file locations.
Check for New
Releases at Startup
When this selection is enabled, the program automatically
checks for the latest Frontline protocol analyzer software
releases.
Side Names... Opens the Side Names dialog used to customize the
names of the slave and master wireless devices.
Protocol Stack... Opens the Select a Stack dialog where the user defines the
protocol stack they want the analyzer to use when
decoding frames.
Set Initial Decoder
Parameters...
Opens the Set Initial Decoder Parameters window. There
may be times when the context for decoding a frame is
missing. For example, if the analyzer captured a response
frame, but did not capture the command frame, then the
decode for the response may be incomplete. The Set Initial
Decoder Parameters dialog provides a means to supply the
context for any frame. The system allows the user to define
any number of parameters and save them in templates for
later use.Each entry in the window takes effect from the
beginning of the capture onward or until redefined in the Set
Subsequent Decoder Parameters dialog. This selection is
not present if no decoder is loaded that supports this
feature.
Set Subsequent
Decoder
Parameters...
Opens the Set Subsequent Decoder Parameters dialog
where the user can override an existing parameter at any
frame in the capture. Each entry takes effect from the
specified frame onward or until redefined in this dialog on a
later frame. This selection is not present if no decoder is
loaded that supports this feature.
Automatically
Request Missing
Decoder
Information
When checked, this selection opens a dialog that asking for
missing frame information. When unchecked, the analyzer
decodes each frame until it cannot go further and it stops
decoding. This selection is not present if no decoder is loaded
that supports this feature.
Enable/Disable
Audio Expert
System
When enabled, the Audio Expert System is active, other
wise it is not available. Only available when an Audio
Expert System licensed device is connected.
Table 2.5 - Control Window Live Menu Selections (continued)
Chapter 2 Getting Started TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 11
The Windows menu selection applies only to the Control window and open analysis windows: Frame
Display,Event Display,Message Sequence Chart,Bluetooth Timeline,Bluetooth low energy
Timeline, and Coexistence View. All other windows, such as the datasource, are not affected by these
selections.
Mode Selection Hot-
Key Description
Live &
Capture
File
Cascade Ctrl-W Arranges open analysis windows in a cascaded view with
window captions visible.
Close All Views Closes Open analysis windows.
Minimize Control
Minimizes All
When checked, minimizing the Control window also
minimizes all open analysis windows.
Frame Display and
Event Display
When these windows are open the menu will display these
selections. Clicking on the selection will bring that window
to the front.
Table 2.6 - Control Window Windows Menu Selections
Mode Selection Hot-Key Description
Live &
Capture
File
Help Topics Opens the Frontline Help window.
About Frontline
Protocol Analysis
System
Provides a pop-up showing the version and release
information, Frontline contact information, and copyright
information.
Support on the Web Opens a browser to fte.com technical support page.
Table 2.7 - Control Window Help Menu Selections
2.3.6 Minimizing Windows
Windows can be minimized individually or as a group when the Control window is minimized. To minimize
windows as a group:
1. Go to the Window menu on the Control window.
2. Select Minimize Control Minimizes All. The analyzer puts a check next to the menu item,
indicating that when the Control window is minimized, all windows are minimized.
3. Select the menu item again to deactivate this feature.
4. The windows minimize to the top of the operating system Task Bar.
TELEDYNE LECROY Chapter 2 Getting Started
12 Frontline BPA low energy Hardware & Software User Manual
TELEDYNE LECROY Everywhereyoulook' OED-0
Chapter 3 Configuration Settings
In this section the Frontline software is used to configure an analyzer for capturing data .
3.1 BPAle I/O Settings - Datasource
3.1.1 BPA Low Energy datasource Toolbar/Menu
The datasource dialog toolbar and menu options are listed below.
Icon Description
Start Sniffing button to begin sniffing. All settings are saved automatically when you
start sniffing.
Pause button to stop sniffing.
Save button to save the configuration if you made changes but did not begin sniffing. All
settings are saved automatically when you start sniffing.
Help button opens the help file.
Table 3.1 - BPA Low Energy Datasource Toolbar
Menu Item Description
File Save and Exit options, self explanatory.
View Hides or displays the toolbar
BPA Low Energy Start Sniffing, Stop Sniffing
Help Opens ComProbe Help, and About BPA Low Energy.
Table 3.2 - BPA Low Energy datasource Menu
Frontline BPA low energy Hardware & Software User Manual 13
Note: Frontline BPA LE supports Bluetooth low energy features through Bluetooth 4.2, except optional extended packet length. 0 EPA Low Energy (immune r4: v." WALWEnagy "up Imam Dance-MM Elk-mm BPAkmauwfln-Ih- LE Device: MUM?» Tie v LEE-um Ufluw Dmmmmhwm ng Tum Kay PIN/condu-
3.1.2 BPA low energy Devices Under Test
You can select the ComProbe BPA low energy analyzer for sniffing Bluetooth low energy communications on
available devices.
Note: Frontline BPA LE supports Bluetooth low energy features through Bluetooth 4.2,
except optional extended packet length.
Figure 3.1 - BPA Low Energy datasource Devices Under Test Tab
The default value in the LE Device drop down is Sync with First Master. Devices in the LE Device
Database may be selected. Once a device is selected or if any other change is made to the Devices Under
TELEDYNE LECROY Chapter 3 Configuration Settings
14 Frontline BPA low energy Hardware & Software User Manual
Note: If one device changes its address and the other device does not, then select the device address that does not change forthe LE Device Address field. LE Eng-W Long lmKey muons a» Note: f you use Copy/Paste to insert the Long Term Key , ComProbe software will auto correct (remove invalid white spaces) to correctly format the key
Test tab, the toolbar save button becomes available. Clicking on this button will save the current Devices
Under Test settings that will be available the next time you open ComProbe BPA low energy analysis.
To begin sniffing Bluetooth low energy simply click the red Start button on the datasource toolbar.
Specifying the LE Device Address
You may specify the LE device you are testing by typing in or choosing its address (BD_ADDR). You can type it
directly into the drop down, or choose it from the existing previous values list in the drop down.
Alternatively you can open the LE Device Database tab, right-click on any device in the list, and click on
Select LE Device in the pop-up menu. The selected device's BD_Addr and Nickname will appear in the
LE Device field.
To enter the device manually type the address - 12 digit hex number (6 octets). The "0x" is automatically
typed in the drop down control.
Note: If one device changes its address and the other device does not, then select the
device address that does not change for the LE Device Address field.
Once you have the devices address identified, the next step is to identify the Encryption.
LE Encryption
Figure 3.2 - BPA low energy Devices Under Test LE Encryption
1. Enter the Long Term Key for the LE Encryption.
The Long Term Key is similar to the Link key in Classic. It is a persistent key that is stored in both devices
and used to derive a fresh encryption key each time the devices go encrypted.
Click here to learn more about the Long Term Key.
In LE, the long term key is generated solely on the slave device and then, during pairing, is distributed to a
master device that wants to establish an encrypted connection to that slave in the future. Thus the long term
key is transmitted over the air, albeit encrypted with a one-time key derived during the pairing process and
discarded afterwards (the so called short term key).
The long term key is directional, i.e. it is only used to for connections from the master to the slave (referring
to the roles of the devices during the pairing process). If the devices also want to connect the other way
round in the future, the device in the master role (during the pairing process) also needs to send its own long
term key to the device in the slave role during the pairing process (also encrypted with the short term key of
course), so that the device which was in the slave during the pairing process can be a master in the future and
connect to the device which was master during the pairing process (but then would be in a slave role).
Since most simple LE devices are only ever slave and never master at all, the second long term key exchange
is optional during the pairing process.
Note: f you use Copy/Paste to insert the Long Term Key , ComProbe software will auto
correct (remove invalid white spaces) to correctly format the key
Chapter 3 Configuration Settings TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 15
Click here to see how to capture data after completing the configuration. omhmmm = :2 \ n. my: mummy, M, u fie _ LEM-Ime— um mmw mwmnvm mm mm M W m mammal!” my mum [maxim M W [balm M W am; my mum mm)
2. Enter a PIN or out-of-band (OOB) value for pairing.
This optional information offers alternative pairing methods.
Click here to learn more about these possible pairing values.
One of two pieces of data allow alternative pairing:
1. PIN is a six-digit (or less if leading zeros are omitted) decimal number.
2. Out-of-Band (OOB) data is a 16-digit hexadecimal code which the devices exchange via a channel that is
different than the le transmission itself. This channel is called OOB.
For off-the-shelf devices we cannot sniff OOB data, but in the lab you may have access to the data exchanged
through this channel.
Click here to see how to capture data after completing the configuration.
Sniffer Diagnostics: Checking this box will record communications traffic between ComProbe software
and the ComProbe BPA low energy hardware. Most often used in conjunction with Frontline Technical
Support instructions should the user have problems with their hardware. Checking this box will not affect
capture, analysis, or display of data.
Filter out ADV packets for Non-Configured devices: Checking this box will filter out advertising packets
from devices not specified in the LE Device field. If "Sync with First Master" has been selected in the LE
Device field checking this box will have not affect. the purpose of this option is to reduce the advertising
traffic in situations where there are many devices; advertising traffic can clutter the captured data with
unnecessary packets.
3.1.3 BPA Low Energy LE Device Database
The LE Device Database contains information about low energy devices that have been discovered or
entered by the user.
Figure 3.3 - BPA Low Energy datasource LE Device Database Tab
The LE Device Database is automatically updated when you perform certain operation such as entering
encryption information from the Devices Under Test dialog.
Device Control Menu
Right-clicking anywhere in
the device list will display the
device control menu that will
Select, Delete, or Add a
device.. Clicking on one of
these menu items will
perform the following
actions.
TELEDYNE LECROY Chapter 3 Configuration Settings
16 Frontline BPA low energy Hardware & Software User Manual
\_ mm W «mm M» ED M ED Addr Type Identity Resolving Kay (INK) Nickname mnmnm Public TIIE
Menu
Item Action
Select Will place this device into the LE Device field in the Device Under Test tab. The device must
be selected/highlighted in the list prior to making this menu selection. If multiple devices have
been selected/highlighted in the list, the first device in the list is placed in the Device Under
Test.
Delete Will deleted the selected/highlighted device from the database. Selecting/highlighting multiple
devices in the list will delete all of those devices.
Add Used for manual entry of a device into the database. A new device entry will append to the
end of the device list. To enter data double click on the field and type in the data. For the BD_
Addr Type field, double click and tab to select available types. See the following image.
Table 3.3 - LE Device Database Control Menu
Figure 3.4 - Add Menu Option Fields Display
Editing a Device
Any device entry can be edited by double-clicking in the field. An edit box will open and new device
information can be typed in.
Figure 3.5 - Editing IRK Field
When editing the BD_Addr Type field "<Tab to toggle>" appears. Press the keyboard Tab key until your
selected device address type appears.
LE Device Database Fields
In the LE Device Database table the following columns appear.
Column Description
BD_Addr The address of the Bluetooth low energy device
BD_Addr Type May be either "Public" or "Random". "Public"addresses are set to BD_
Addr. "Random" is either a 'static" or "private" address. "Static" address
is a 48 bit randomly generated address. "Private" address is a 48 bit
"non-resolvable" address or "resolvable' address. A "resolvable" address
is generated using an IRK.
Identity Resolving Key
(IRK)
Will appear when BD_Addr Type is Random, Private, and Resolvable. A
host device with a list of IRKs can search the list to identify a peer
device that has previously authenticated with the host. This field can be
used to identify Bluetooth low energy devices that have previously
authenticated.
Nickname A user-added name for the device, often used to make device
identification easier during the analysis. Can be any alpha-numeric
string.
Table 3.4 - BPA Low Energy Datasource LE Device Database Fields
Chapter 3 Configuration Settings TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 17
0 BPALowEnugydatasource A rue View BPALowEnugy Help mm: unmammu-umumm Update Firmware on the EPA Low Energy datasource information Lab
3.1.4 BPA low energy Datasource Information
The ComProbe BPA low energy Information tab is one of the three tabs that appear when you first start the
low energy analyzer.
Figure 3.6 - BPA low energy Information Tab
There are several pieces of information on this display:
lDisplayed in the text window is the serial number of the connected BPA 600 device. To update the device
list click Refresh Device List.
lIf you want to load the latest ComProbe BPAle hardware firmware, you select the Update Firmware
button..
lThe current firmware is displayed under Firmware Version.
3.1.5 BPA low energy Update Firmware
When you select the Update Firmware on the BPA Low Energy datasource information tab, the
Update BPA low energy ComProbe firmware dialog appears. You use this dialog to update your low
energy analyzer with the latest firmware.
It is very important that you update the firmware. If the firmware versions are not the same, you will not be
able to start sniffing.
TELEDYNE LECROY Chapter 3 Configuration Settings
18 Frontline BPA low energy Hardware & Software User Manual
fig: (thwram Fles (msfimmum Test System mFronthe Commute P'ohncol Analysis System 12 lamml Status: Evrov uperhg DFU file —
Figure 3.7 - BPA low energy Information Tab Update Firmware Dialog
1. Make sure the ComProbe BPA low energy analyzer is attached.
2. Select the location of the firmware file.
3. Select Flash Device. The download begins, with the Status bar displaying the progress. When the
download is complete, you can check the firmware version by checking the Status field.
4. Select Done when the update is finished.
3.2 Decoder Parameters
Some protocol decoders have user-defined parameters. These are protocols where some information cannot
be discovered by looking at the data and must be entered by the user in order for the decoder to correctly
decode the data. For example, such information might be a field where the length is either 3 or 4 bytes, and
which length is being used is a system option.
There may be times when the context for decoding a frame is missing. For example, if the analyzer captures a
response frame but does not capture the command frame, then the decode for the response may be
incomplete. The Set Initial Decoder Parameters window allows you to supply the context for any frame.
The dialog allows you to define any number of parameters and save them in a template for later use
The decoder template function provides the capacity to create multiple templates that contain different
parameters. This capability allows you to maintain individual templates for each Bluetooth® network
monitored. Applying a template containing only those parameters necessary to decode transmissions
particular to an individual network, enhances the efficiency of the analyzer to decode data.
If you have decoders loaded which require decoder parameters, a window with one tab for every decoder
that requires parameters appears the first time the decoder is loaded.
For help on setting the parameters, click the Help button on each tab to get help information specific to that
decoder.
If you need to change the parameters later,
lChoose Set Initial Decoder Parameters... from the Options menu on the Control and Frame
Display windows.
Chapter 3 Configuration Settings TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 19
opium w-m Help Ihmsafngs , l/OSdlings > Symnsafings. Ame-nu Dimes. W ammmnmusmup Sithlhns. Pmcnl m. \ 5: Initial Detodu rm. sq Subsequmt Decodct humanism \ ./ my m Mssing Bunting Hommion Hmmw veaxlmm [AWWMMWIWN IPX ID no»
Figure 3.8 - Select Set Initial Decoder Parameters... from Control window
The Set Initial Decoder Parameters window opens with a tab for each decoder that requires
parameters.
Figure 3.9 - Tabs for each decoder requiring parameters.
lEach entry in the Set Initial Decoder Parameters window takes effect from the beginning of the
capture onward or until redefined in the Set Subsequent Decoder Parameters dialog.
Override Existing Parameters
The Set Subsequent Decoder Parameters dialog allows the user to override an existing parameter at any
frame in the capture where the parameter is used.
If you have a parameter in effect and wish to change that parameter
lSelect the frame where the change should take effect
lSelect Set Subsequent Decoder Parameters... from the Options menu, and make the needed
changes. You can also right-click on the frame to select the same option.
TELEDYNE LECROY Chapter 3 Configuration Settings
20 Frontline BPA low energy Hardware & Software User Manual
SdlniiallkcnduPuImde-s. sawmmvm fl lemmuisangommm Insuceeow wmmw‘ mum-1| lulu | cum-a: BY law mm, mud Emu: 1 mmwmmmm 3.. human Hub Mm Du] Bland vaaTwa P/FBI cm. Emma 5n Mm. I mm a sum I 51 S‘aw 1 um n u I m S‘av: 1 [Mn n um n R5 PalamNeg mummmmmmmmhamm mmm&.m5maamu l1mlmmfin(mblml mom-«mm
Figure 3.10 - Set Subsequent Decoder Parameters... from Control window
Figure 3.11 - Example: Set Subsequent Decode for Frame #52, RFCOMM
lEach entry in the Set Subsequent Decoder Parameters dialog takes effect from the specified frame
onward or until redefined in this dialog on a later frame.
lThe Remove Override button will remove the selected decode parameter override.
lThe Remove All button will remove all decoder overrides.
If you do not have decoders loaded that require parameters, the menu item does not appear and you don't
need to worry about this feature.
3.2.1 Decoder Parameter Templates
3.2.1.1 Select and Apply a Decoder Template
1. Select Set Initial Decoder Parameters... from the Options menu on the Control window
or the Frame Display window.
Chapter 3 Configuration Settings TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 21
Tanr‘ak thgu Mm n. Save rmuwaan nmunu DmenLv Savm “Whale: Fm mm mm m: rmnum annneZ anflneS H mm: rmnums
2. Click the Open Template icon in the toolbar and select the
desired template from the pop up list. The system displays the
content of the selected template in the Initial Connections list at
the top of the dialog
3. Click the OK button to apply the selected template and decoders'
settings and exit the Set Initial Decoder Parameters dialog.
3.2.1.2 Adding a New or Saving an Existing Template
Add a Template
A template is a collection of parameters required to completely decode communications between multiple
devices. This procedure adds a template to the system and saves it for later use:
1. Click the Save button at the top of the Set Initial
Decoder Parameters dialog to display the Template
Manager dialog.
2. Enter a name for the new template and click OK.
The system saves the template and closes the Template
Manager dialog.
3. Click the OK button on the Set Initial Decoder
Parameters window to apply the template and close the
dialog.
Save Changes to a Template
This procedure saves changes to parameters in an existing template.
1. After making changes to parameter settings in a user defined template, click the Save button at
the top of the Set Initial Decoder Parameters window to display the Template Manager dialog.
2. Ensure that the name of the template is listed in the Name to Save Template As text box and click
OK.
3. The system displays a dialog asking for confirmation of the change to the existing template. Click the
Yes button.
The system saves the parameter changes to the template and closes the Save As dialog.
4. Click the OK button on the Set Initial Decoder Parameters window to apply the template and
close the window.
3.2.1.3 Deleting a Template
1. After opening the Set Initial Decoder Parameters window click the Delete button in the
toolbar.
The system displays the Template Manager dialog with a list of saved templates.
TELEDYNE LECROY Chapter 3 Configuration Settings
22 Frontline BPA low energy Hardware & Software User Manual
Note: By default the decoder decodes only the header fields of the frame. \Avmrlmlmwlnroouulw \usa IIPX ITCP Imp] Smhfimflmfim Deondealyhheada’fiddldlhesxfiamhddi (’1 mamm(mm.mmtmmmmmwm SBCfr-ne‘nddd *y—rmnmmy—y—y—y—Wmmn m w mm..~mm._.mwwmaWM-mw % M E Mu: may. urn-sagas) mm
2. Select (click on and highlight) the template marked for deletion and click the Delete button.
The system removes the selected template from the list of saved templates.
3. Click the OK button to complete the deletion process and close the Delete dialog.
4. Click the OK button on the Set Initial Decoder Parameters window to apply the deletion and
close the dialog.
3.2.2 Selecting A2DP Decoder Parameters
Decoding SBC frames in the A2DP decoder can be slow if the analyzer decodes all the parts (the header, the
scale factor and the audio samples) of the frame. You can increase the decoding speed by decoding only the
header fields and disregarding other parts. You can select the detail-level of decoding using the Set Initial
Decoder Parameters window.
Note: By default the decoder decodes only the header fields of the frame.
1. Select Set Initial Decoder Parameters from the Options menu on the Control window or the
Frame Display window.
2. Click on the A2DP tab.
3. Choose the desired decoding method.
Figure 3.12 - A2DP Decoder Settings
4. Follow steps to save the template changes or to save a new template.
5. Click the OK button to apply the selection and exit the Set Initial Decoder Parameters window.
3.2.3 L2CAP Decoder Parameters
3.2.3.1 About L2CAP Decoder Parameters
Each entry in the Set Initial Decoder Parameters dialog takes effect from the beginning of the capture onward
or until redefined in the Set Subsequent Decoder Parameters dialog.
Figure 3.13 - L2CAP Decoder parameters tab
Chapter 3 Configuration Settings TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 23
Frame 37: [Slave] Len-27 Basebam‘t E LZCAP H ole. Slave Adciess: 1 PDU Length, 14 Channel ID: DxUDdD [SDP] E S D P
The L2CAP Set Initial Decoder Parameters dialog requires the following user inputs to complete a
Parameter :
lStream - This identifies the role of the device initiating the frame (master or slave)
lChannel ID - The channel number 0 through 78
lAddress - This is the physical connection values for the devices. Each link in the net will have an address.
A piconet can have up to seven links. The Frame Display can
provide address information.
lData Source (DS) No. -When only one data source is employed,
set this parameter to 0 (zero), otherwise, set to the desired data
source number.
Carries (PSM) - Select the protocol that L2CAP traverses to from the
following:
lAMP Manager
lAMP Test Manager
lSDP
lRFCOMM
lTCS
lLPMP
lBNEP
lHCRP Control
lHCRP Data
lHID
lAVCTP
lAVDTP
lCMTP
lMCAP Control
lIEEE P11073 20601
l-Raw Data-
Adding, Deleting, and Saving L2CAP Parameters
1. From the Set Initial Decoder Parameters window, click on the L2CAP tab.
2. Set or select the L2CAP decoder parameters.
3. Click on the ADD button. The Initial Connection window displays the added parameters.
TELEDYNE LECROY Chapter 3 Configuration Settings
24 Frontline BPA low energy Hardware & Software User Manual
Wmhdmmmdmmmmhhkmemmmv DrlfluSawsd:.wfl|Cle.MfimflV-Idm35nmLlfll’ismryhngTaMluw OnlhaMaium.vthDW.M¢wfl.deaaSuluZ.LmiloamSMP mnuanam.maom.mmn.mrism—Rawbaa— "us .5 m: Summary Pan: cm mu m Cipbollfl Sm Selenium. Ga In... Shunt mm 51:: cur-u. 9m rum-up Curr-m 9w- new. Com-m. Add New mm. pup) Remove New Column Chang: Coll-nu om: map) More Dian}! (Ah-ms Add Bookmark... ham“ Prank |2
Figure 3.14 - Parameters Added to Decoder
4. To delete a parameter from the Initial Connections window, select the parameter and click on the
Delete button.
5. Decoder parameters cannot be edited. The only way to change a parameter is to delete the original as
described above, and recreate the parameter with the changed settings and selections and then click
on the Add button.
6. L2CAP parameters are saved when the template is saved.
3.2.3.2 L2CAP Override Decode Information
The Set Subsequent Decoder Parameters dialog allows the user to override an existing parameter at any
frame in the capture where the parameter is used.
If you have a parameter in effect and wish to change that parameter:
1. Select the frame where the change should take effect
2. Select Set Subsequent Decoder Parameters from
the Options menu, or by selecting a frame in the frame
display and choosing from the right-click pop-up menu,
and make the needed changes. Refer to
3. Change the L2CAP parameter by selecting from the rule
to change, and click on the listed parameters.
4. If you wish to remove an overridden rule click on
Remove Override button. If you want to remove all
decoder parameter settings click on Remove All.
5. Click OK.
Each entry in the Set Subsequent Decoder Parameters
dialog takes effect from the specified frame onward or until
redefined in this dialog on a later frame.
Note: If the capture has no user defined overrides, then the
system displays a dialog stating that no user defined
overrides exist.
3.2.4 RFCOMM Decoder Parameters
3.2.4.1 About RFCOMM Decoder Parameters
Each entry in the Set Initial Decoder Parameters dialog takes effect from the beginning of the capture
onward or until redefined in the Set Subsequent Decoder Parameters dialog.
Chapter 3 Configuration Settings TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 25
fil—I—fi‘y—I—l—I—‘mmmxmmm m 1w w mmhmmwdmu—n‘unnmwmm‘qi a»— El hwwuum r—wm \_/M hkmzmkn—gm-‘kmflaummnmkm‘munkMW “WM-fl
Figure 3.15 - RFCOMM parameters tab
The RFCOMM Set Initial Decoder Parameters tab requires the following user inputs to complete a
parameter:
lStream - Identifies the role of the device initiating the frame (master or slave)
lServer Channel - The Bluetooth® channel number 0 through 78
lDLCI - This is the Data Link Connection Identifier, and identifies the ongoing connection between a client
and a server
lData Source (DS) No.- When only one data source is employed, set this parameter to 0 (zero),
otherwise, set to the desired data source
lCarries (UUID) - Select from the list to apply the Universal Unique Identifier (UUID) of the application
layer that RFCOMM traverses to from the following:
oOBEX
oSPP
oencap asyncPPP
oHeadset
oFAX
oHands Free
oSIM Access
oVCP
oUDI
o-Raw Data-
Adding, Deleting, and Saving RFCOMM Parameters
1. From the Set Initial Decoder Parameters window, click on the RFCOMMtab.
2. Set or select the RFCOMMdecoder parameters.
3. Click on the ADD button. The Initial Connection window displays the added parameters.
Figure 3.16 - Parameters Added to Decoder
TELEDYNE LECROY Chapter 3 Configuration Settings
26 Frontline BPA low energy Hardware & Software User Manual
on Eage 1
4. To delete a parameter from the Initial Connections window, select the parameter and click on the
Delete button.
5. Decoder parameters cannot be edited. The only way to change a parameter is to delete the original as
described above, and recreate the parameter with the changed settings and selections and then click
on the Add button.
6. RFCOMM parameters are saved when the template is saved as described in on page 1
3.2.4.2 RFCOMM Missing Decode Information
ComProbe software usually determines the protocol carried in an RFCOMM payload by monitoring previous
traffic. However, when this fails to occur, the Missing Decoding Information Detected dialog appears
and requests that the user supply the missing information.
The following are the most common among the many possible reasons for a failure to determine the
traversal:
lThe capture session started after transmission of the vital information
lThe analyzer incorrectly received a frame with the traversal information
lThe communication monitored takes place between two players with implicit information not included in
the transmission
In any case, either view the RFCOMM payload of this frame (and other frames with the same channel) as hex
data, or assist the analyzer by selecting a protocol using this dialog.
Note that you may use the rest of the analyzer without addressing this dialog. Additional information gathered
during the capture session may help you decide how to respond to the request for decoding information.
If you are not sure of the payload carried by the subject frame, look at the raw data shown under data in the
Decode pane in the Frame Display. You may notice something that hints as to the profile in use.
In addition, look at some of the frames following the one in question. The data may not be recognizable to the
analyzer at the current point due to connection setup, but might be discovered later on in the capture.
3.2.4.3 RFCOMM Override Decode Information
The Set Subsequent Decoder Parameters dialog allows the user to override an existing parameter at any
frame in the capture where the parameter is used.
If you have a parameter in effect and wish to change that parameter:
Chapter 3 Configuration Settings TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 27
ms is the Summary Pane Copy 5am a: GM Sm sums”... Go roe. « i sow Flume Sn Column 9m 1m“; Cal-nu « i m M Column M Na:- cm...“ (my) Remove New Column cm, mun... om (lap) m new Coll-ms m mm" 5pm. mm: mm mm. Provide nrcoma his... Sn mm"... Dxmh puma. 9m Hum P-ns v S‘hh—vmmhm ‘ my may i mnmwmmmi wznmmnmmrwnwt Not ' f the capture has no user defined overrides, then the system displays a dialog stating that no user defined overrides exist.
1. Select the frame where the change should take effect,
and select Set Subsequent Decoder Parameters
from the Options menu, or by selecting a frame in the
frame display and choosing from the right-click pop-up
menu, and make the needed changes.
2. Change the RFCOMM parameter by selecting from the
Change the Selected Item to Carry drop down list.
3. If you wish to remove an overridden rule click on
Remove Override button. If you want to remove all
decoder parameter settings click on Remove All.
4. Choose the protocol the selected item carries from the
drop-down list, and click OK.
Each entry in the Set Subsequent Decoder Parameters
dialog takes effect from the specified frame onward or until
redefined in this dialog on a later frame.
Figure 3.17 - Set Subsequent Decoder Parameters selection list
Note: If the capture has no user defined overrides, then the system displays a dialog
stating that no user defined overrides exist.
TELEDYNE LECROY Chapter 3 Configuration Settings
28 Frontline BPA low energy Hardware & Software User Manual
q.‘ TELEDVNE LECRDY Everywhereyoulook' mugé 5 Indoor Path Loss (in dB) = 40 + 35Logm (range, in meters)
Chapter 4 Capturing and Analyzing Data
The following sections describe the various ComProbe software functions that capture and display data
packets.
4.1 Capture Data
4.1.1 Air Sniffing: Positioning Devices
When capturing over the air packets, proper positioning of the Frontline hardware and the Devices Under
Test (DUTs) will result in the best possible captures and will mitigate sources of path loss and interference.
The following procedures will help optimize the capture process especially if you are have problems
obtaining reliable …captures.
Problems with indoor radio propagation
Even in free space, it is well understood that radio frequencies attenuate over distance. The free-space rule-
of-thumb dictates that radio energy decreases in strength by 20 dB by each 10-to-1 increase in range. In the
real-world, the effects of objects in an outdoor environment cause reflection, diffraction, and scattering
resulting in greater signal losses. Indoors the situation can be worse. Reflections occur from walls and other
large flat surfaces. Diffraction occurs from objects with sharp edges. Scattering is produced from objects with
rough surfaces and from small objects. Also any object directly in the path of the radiation can present a hard
or soft partition depending on the partition's material properties. Path losses from partitions are difficult to
estimate.
Estimating indoor propagation loss
One estimate of indoor path loss, based on path loss data from a typical building, provides a power
rule. At 2.4 GHz, the following relationship provides an approximate estimate of indoor path loss:
This approximation is expected to have a variance of 13 dB.
Frontline BPA low energy Hardware & Software User Manual 29
Mitigating path loss and interference
Bluetooth device design contributes to mitigating environmental effects on propagation through spread
spectrum radio design, for example. However, careful planning of the testing environment can also
contribute to reliable data capture process.
The first step to ensuring reliable air-sniffing data capture is to understand the RF characteristics of the
Devices Under Test (DUTs). The Bluetooth Class, antenna types, and radiation patterns are all important factors
that can affect the placement of the DUTs and the Frontline hardware. Radiation patterns are rarely spherical,
so understanding your device's radiation patterns can greatly enhance successful data capture. Position
devices to avoid radiation attenuation by the surroundings.
This step is optional: Consider conductive testing to establish a baseline capture. Conductive testing isolates
the DUTs and analyzer from environmental effects.
The next step is to ensure that the testing environment is as clutter-free as possible.
lLine-of-sight obstructions should be eliminated between the Frontline hardware and the DUTs because
they cause a reduction in signal strength. Obstructions include, but are not limited to: water bottles,
coffee cups, computers, computer screens, computer speakers, and books. A clear, unobstructed line-of-
sight is preferred for DUT and Frontline hardware positioning.
lIf using an analyzer connected to a computer, position the computer on an adjacent table or surface away
from the analyzer and DUTs, taking advantage of the cables' length. If this is not possible, position the
computer behind the analyzer as far away as possible. If using the Frontline FTS4BT, which is a dongle,
either use an extension USB cable or position the computer such that the dongle is positioned towards the
DUTs.
lThe preferred placement is positioning the DUTs and the Frontline hardware at the points of an
equilateral triangle in the same horizontal plane, i.e. placed on the same table or work surface. The sides
of the triangle should be between 1 and 2 meters for Bluetooth transmitter classes 1 and 2. The distance
for transmitter class 3 should be 1/2 meter.
Figure 4.1 - Devices Equally Spaced in the Same Horizontal Plane
Finally, eliminate other RF sources.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
30 Frontline BPA low energy Hardware & Software User Manual
Note: Capture is not available in Viewer mode. Note: For the Dashboard, when you capture 10 series of files, the window displays the data from the beginning of the first capture, even when a new file in the series is created. This is because the Dashboard is a "Session Monitor', which means that even if you capture to a series of files, the data from the first file is always displayed. The display does not refresh when a new capture file in a series is created.
lWi-Fi interference should be minimized or eliminated. Bluetooth shares the same 2.4 GHz frequency
bands as Wi-Fi technology. Wi-Fi interference can cause loss of packets and poor captures. In a laboratory
or testing environment do not place the DUTs and Frontline hardware in close proximity with Wi-Fi
transmitting sources such as laptops or routers. Turning off Wi-Fi on the computer running the Frontline
software is recommended.
Poor Placement
A poor test configuration for the analyzer is placing the DUTs very close to each other and the analyzer far
away. The DUTs, being in close proximity to each other, reduce their transmission power and thus make it
hard for the analyzer to hear the conversation. If the analyzer is far away from DUTs, there are chances that
the analyzer may miss those frames, which could lead to failure in decryption of the data.
Obstacles in close proximity to or in between the analyzer and the DUTs can interfere and cause reduction in
signal strength or interference. Even small objects can cause signal scattering.
Figure 4.2 - Example: Poor Capture Environment
4.1.2 Capturing Data to Disk - General Procedure
Note: Capture is not available in Viewer mode.
1. Click the Start Capture button to begin capturing to a file. This icon is located on the Control ,
Event Display, and Frame Display windows.
2. Files are placed in My Capture Files by default and have a .cfa extension. Choose Directories from the
Options menu on the Control window to change the default file location.
Note: For the Dashboard, when you capture to series of files, the window displays
the data from the beginning of the first capture, even when a new file in the series is
created. This is because the Dashboard is a "Session Monitor", which means that
even if you capture to a series of files, the data from the first file is always
displayed. The display does not refresh when a new capture file in a series is
created.
3. Watch the status bar on the Control window to monitor how full the file is. When the file is full, it
begins to wrap, which means the oldest data will be overwritten by new data.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 31
Syste m Setti n g5
4. Click the Stop Capture icon to temporarily stop data capture. Click the Start Capture icon again
to resume capture. Stopping capture means no data will be added to the capture file until capture is
resumed, but the previously captured data remains in the file.
5. To clear captured data, click the Clear icon .
lIf you select Clear after selecting Stop Capture, a dialog appears asking whether you want to
save the data.
oYou can click Save File and enter a file name when prompted .
oIf you choose Do Not Save, all data will be cleared.
oIf you choose Cancel, the dialog closes with no changes.
lIf you select the Clear icon while a capture is occurring:
oThe capture stops.
oA dialog appears asking if you want to save the capture
oYou can select Yes and save the capture or select No and close the dialog. In either case, the
existing capture file is cleared and a new capture file is started.
oIf you choose Cancel, the dialog closes with no changes.
To see how to capture to a single file, choose System Settings from the Options menu on the Control window.
When live capture stops, no new packets are sniffed but there can still be packets that were previously
sniffed but not yet read by the ComProbe analyzer. This happens when packets are being sniffed faster than
the ComProbe analyzer can process them. These packets are stored either on the ComProbe hardware itself
or in a file on the PC. If there are remaining packets to be processed when live capture stops the
Transferring Packets dialog below is displayed showing the packets yet to be read by the ComProbe
analyzer. The dialog shows the name of each ComProbe hardware device, its process id in square brackets,
and the number of packets remaining. These stored packets are read until they’re exhausted or the user
clicks the Discard button on the dialog.
Unlike 802.11, Bluetooth packets never come in faster than the datasource can process them. However,
Bluetooth packets must still be stored so that they can be read in chronological order with the 802.11 packets.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
32 Frontline BPA low energy Hardware & Software User Manual
Tmnslevring Pdee|s . (went Picka I’vansfer sums: Human Pedals an rum“: \ Cumbe 802.11 [6120] 21,034 a m 5m [2720] Yutal 21,097 mac-pun hssmd In m.- “ Dada: burn-don m. meu Hldwuakhak my“ bemdewded, m ”
Figure 4.3 - Packet Transfer Dialog
4.1.3 Extended Inquiry Response
Extended Inquiry Response (EIR) is a tab that appears automatically on the Frame Display window
when you capture data.
Figure 4.4 - Frame Display Extended Inquire Response
EIR displays extensive information about the Bluetooth® devices that are discovered as data is being captured.
EIR provides more information during the inquiry procedure to allow better filtering of devices before
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 33
Note: If a Bluetooth device does not support Extended Inquiry Response, (he tab displays Received Signal Strength Indication (RSSI)data, which is less extensive than EIR data. Sded a Dmal 5M mammlam ,mmom, mziimc mum hm, Whflmmrmmmfimimm wmuWMumm mmuausevahmmm g mmmmnm rmm 5M9: m rm in am». mm Tran-whim Mam Creating and Removing a Custom Slack on page 35 Reframing on gage 36
connection; and sniff subrating, which reduces the power consumption in low-power mode.Before the EIR
tab was created, this type of information was not available until a connection was made to a device.
Therefore, EIR can be used to determine whether a connection can/should be made to a device prior to
making the connection.
Note: If a Bluetooth device does not support Extended Inquiry Response, the tab
displays Received Signal Strength Indication (RSSI) data, which is less extensive
than EIR data.
4.2 Protocol Stacks
4.2.1 Protocol Stack Wizard
The Protocol Stack wizard is where you define the
protocol stack you want the analyzer to use when
decoding frames.
To start the wizard:
1. Choose Protocol Stack from the Options
menu on the Control window or click the
Protocol Stack icon on the Frame
Display.
2. Select a protocol stack from the list, and
click Finish.
Most stacks are pre-defined here. If you have
special requirements and need to set up a custom
stack, see Creating and Removing a Custom Stack
on page 35.
1. If you select a custom stack (i.e. one that was defined by a user and not included with the analyzer),
the Remove Selected Item From List button becomes active.
2. Click the Remove Selected Item From Listbutton to remove the stack from the list. You cannot
remove stacks provided with the analyzer. If you remove a custom stack, you need to define it again in
order to get it back.
If you are changing the protocol stack for a capture file, you may need to reframe. See Reframing on page 36
for more information.
You cannot select a stack or change an existing one for a capture file loaded into the Capture File Viewer (the
Capture File Viewer is used only for viewing capture files and cannot capture data). Protocol Stack changes
can only be made from a live session.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
34 Frontline BPA low energy Hardware & Software User Manual
Wmmmnymmmmmhm me1m0mm a W m: Remove 5mm nun Fvum u: EE-
4.2.2 Creating and Removing a Custom Stack
To create a custom stack:
1. Choose Protocol Stack from the
Options menu on the Control
window or click the Protocol Stack
icon on the Frame Display
toolbar.
2. Select Build Your Own from the
list and click Next.
3. The system displays an information
screen that may help you decide if
you need to define your own
custom stack. Defining a custom
stack means that the analyzer uses
the stack for every frame. Frames
that do not conform to the stack
are decoded incorrectly. Click
Next to continue.
Select Protocols
1. Select a protocol from the list on
the left.
2. Click the right arrow button to
move it to the Protocol Decode
Stack box on the right, or double-
click the protocol to move it to the
right.
3. To remove a protocol from the
stack, double-click it or select it
and click the left arrow button.
4. If you need to change the order of the protocols in the stack, select the protocol you want to move,
and click on the Move Up and Move Down buttons until the protocol is in the correct position.
5. The lowest layer protocol is at the top of the list, with higher layer protocols listed underneath.
Auto-traversal (Have the analyzer Determine Higher Layers)
If you need to define just a few layers of the protocol stack, and the remaining layers can be determined
based on the lower layers:
1. Click the All additional stack layers can be determined automatically button.
2. If your protocol stack is complete and there are no additional layers, click the There are no
additional stack layers button.
3. If you select this option, the analyzer uses the stack you defined for every frame. Frames that do use
this stack are decoded incorrectly.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 35
Note: If you do not save your custom stack, it does appear in the predefined list, but applies to the frames in the current session. However, it is discarded at the end of the session. Note: You cannot reframe from the Capture File Viewer . Unframing on page 36
Save the Stack
1. Click the Add To Predefined List button.
2. Give the stack a name, and click Add.
In the future, the stack appears in the Protocol Stack List on the first screen of the Protocol Stack wizard.
Remove a Stack
1. Select it in the first screen and click Remove Selected Item From List.
2. If you remove the stack, you must to recreate it if you need to use it again.
Note: If you do not save your custom stack, it does appear in the predefined list, but
applies to the frames in the current session. However, it is discarded at the end of the
session.
4.2.3 Reframing
If you need to change the protocol stack used to interpret a capture file and the framing is different in the
new stack, you need to reframe in order for the protocol decode to be correct. You can also use Reframe to
frame unframed data. The original capture file is not altered during this process.
Note: You cannot reframe from the Capture File Viewer .
To reframe your data, load your capture file, select a protocol stack, and then select Reframe from the File
menu on the Control window. Reframe is only available if the frame recognizer used to capture the data is
different from the current frame recognizer.
In addition to choosing to Reframe, you can also be prompted to Reframe by the Protocol Stack Wizard.
1. Load your capture file by choosing Open from the File menu on the Control window, and select the
file to load.
2. Select the protocol stack by choosing Protocol Stack from the Options menu on the Control
window, select the desired stack and click Finish.
3. If you selected a protocol stack that includes a frame recognizer different from the one used to
capture your data, the Protocol Stack Wizard asks you if you want to reframe your data. Choose
Yes.
4. The analyzer adds frame markers to your data, puts the framed data into a new file, and opens the
new file. The original capture file is not altered.
See Unframing on page 36for instructions on removing framing from data.
4.2.4 Unframing
This function removes start-of-frame and end-of-frame markers from your data. The original capture file is
not altered during this process. You cannot unframe from the Capture File Viewer (accessed by selecting
Capture File Viewer or Load Capture File to start the software and used only for viewing capture files).
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
36 Frontline BPA low energy Hardware & Software User Manual
Reframingon Rage 36
To manually unframe your data:
1. Select Unframe from the File menu on the Control window. Unframe is only available if a
protocol stack was used to capture the data and there is currently no protocol stack selected.
In addition to choosing to Unframe, you can also be prompted to Unframe by the Protocol Stack Wizard.
1. Load your capture file by choosing Open from the File menu on the Control window.
2. Select the file to load.
3. Choose Protocol Stack from the Options menu on the Control window
4. Select None from the list
5. Click Finish. The Protocol Stack Wizard asks you if you want to unframe your data and put it into a
new file.
6. Choose Yes.
The system removes the frame markers from your data, puts the unframed data into a new file, and opens
the new file. The original capture file is not altered.
See Reframing on page 36 for instructions on framing unframed data.
4.2.5 How the Analyzer Auto-traverses the Protocol Stack
In the course of doing service discovery, devices ask for and receive a Protocol Descriptor List defining which
protocol stacks the device supports. It also includes information on which PSM to use in L2CAP, or the channel
number for RFCOMM, or the port number for TCP or UDP. The description below talks about how the
analyzer auto-traverses from L2CAP using a dynamically assigned PSM, but the principle is the same for
RFCOMM channel numbers and TCP/UDP port numbers.
The analyzer looks for SDP Service Attribute Responses or Service Search Attribute Responses carrying
protocol descriptor lists. If the analyzer sees L2CAP listed with a PSM, it stores the PSM and the UUID for the
next protocol in the list.
After the SDP session is over, the analyzer looks at the PSM in the L2CAP Connect frames that follow. If the
PSM matches one the analyzer has stored, the analyzer stores the source channel ID and destination channel
ID, and associates those channel IDs with the PSM and UUID for the next protocol. Thereafter, when the
analyzer sees L2CAP frames using those channel IDs, it can look them up in its table and know what the next
protocol is.
In order for the analyzer to be able to auto-traverse using a dynamically assigned PSM, it has to have seen the
SDP session giving the Protocol Descriptor Lists, and the subsequent L2CAP connection using the PSM and
identifying the source and channel IDs. If the analyzer misses any of this process, it is not able to auto-traverse.
It stops decoding at the L2CAP layer.
For L2CAP frames carrying a known PSM (0x0001 for SDP, for example, or 0x0003 for RFCOMM), the analyzer
looks for Connect frames and stores the PSM along with the associated source and destination channel IDs. In
this case the analyzer does not need to see the SDP process, but does need to see the L2CAP connection
process, giving the source and destination channel IDs.
4.2.6 Providing Context For Decoding When Frame Information Is Missing
There may be times when you need to provide information to the analyzer because the context for decoding
a frame is missing. For example, if the analyzer captured a response frame, but did not capture the command
frame indicating the command.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 37
The analyzer provides a way for you to supply the context for any frame, provided the decoder supports it.
(The decoder writer has to include support for this feature in the decoder, so not all decoders support it.
Note that not all decoders require this feature.)
If the decoder supports user-provided context, three items are active on the Options menu of the Control
window and the Frame Display window. These items are Set Initial Decoder Parameters,
Automatically Request Missing Decoding Information, and Set Subsequent Decoder Parameters.
(These items are not present if no decoder is loaded that supports this feature.)
Set Initial Decoder Parameters is used to provide required information to decoders that is not context
dependent but instead tends to be system options for the protocol.
Choose Set Initial Decoder Parameters in order to provide initial context to the analyzer for a decoder. A
dialog appears that shows the data for which you can provide information.
If you need to change this information for a particular frame :
1. Right-click on the frame in the Frame Display window
2. Choose Provide <context name>.
Alternatively, you can choose Set Subsequent Decoder Parameter from the Options menu.
3. This option brings up a dialog showing all the places where context data was overridden.
4. If you know that information is missing, you can't provide it, and you don't want to see dialogs asking
for it, un-check Automatically Request Missing Decoding Information.
5. When unchecked, the analyzer doesn't bother you with dialogs asking for frame information that you
don't have. In this situation, the analyzer decodes each frame until it cannot go further and then simply
stop decoding.
4.3 Analyzing Protocol Decodes
4.3.1 The Frame Display
To open this window
Click the Frame Display icon on the Control window toolbar, or select Frame Display from the
View menu.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
38 Frontline BPA low energy Hardware & Software User Manual
Decoder Pane mom a...“ fi—hh-uu-f-I—u- MUN. Haw} Binary Pane Summary Pane Protocol Tabs Navlgaflon a. Search Tools «nun-no MYV‘SEM IEILJHZH J [Halli-@000 "“ a n... M9MU56-I-qu Ddlhfi Ian-VHIWDLIII—IWIQAJ :' | I hill-Imam“ mw‘sru“nl’i“"" “Hm-“II mm“ k run! M- mm on MILK-1 IS! I) ran- mm... M”. w a. . mm mm m a... ! am . , rm?" . ‘ “3“» m a: . and“ mu m- u. . mm mm. .9. I... ‘ .1... WWW-..“ an a... ‘ m mun—own. w u.- ‘ am . mm...“ ‘ , g M \—-—' u... annual nuanvun when“ nuunw union) annex-u uuunuu nnnuax enounon m... Hananann nuanunu uenonono wannabe uamnn 111mm uaxunnn “mm mum 3 an...» immune nan-nu seamen mm” uanenann unawnn aabnnan aanauau uncle: 9...»... mm" aanam aauune nan-mu aaunxe annnnx unread nexnnax “new: , WM». emem mm: «mm mm m. 3:. mo mum mo mum u... M m. mm mm a... n a: u « n u u u u :1 w moan-I nunnwn “mam. wwmnmnnhaan-nn: n n u 3! 2| u u n w n n «mum aeuuu wnxouo «um: «mom c me mmn M7) new a .u r: u :7 on :3 oe u on w u a: nnNuuuununuu»j um. Inuununnvu u N n u n u u n u u n u u u n u u 31! n n u u u u :7 :- a! n u n u is u u n u a: u n u n 3: n n n u u 3‘ :5 n :1 u "an 32:: 35:1 nuuuuuunuusouu n a: when" ' i; i1 ii 331? “ ‘ Character Pane Radlx Pane Evenl Pane Summam Pane here Decode Pane Radix Pane logical data bfles Binary Pane
Figure 4.5 - Frame Display with all panes active
Frame Display Panes
The Frame Display window is used to view all frame related information. It is composed of a number of
different sections or "panes", where each pane shows a different type of information about a frame.
lSummary Pane - The Summary Pane displays a one line summary of each frame for every protocol
found in the data, and can be sorted by field for every protocol. Click here for an explanation of the
symbols next to the frame numbers.
lDecode Pane - The Decode Pane displays a detailed decode of the highlighted frame. Fields selected in
the Decode Pane have the appropriate bit(s) or byte(s) selected in the Radix,Binary,Character , and
Event panes
lRadix Pane - The Radix Pane displays the logical data bytes in the selected frame in either hexadecimal,
decimal or octal.
lBinary Pane - The Binary Pane displays a binary representation of the logical data bytes.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 39
Characker Pane Evenk Pane EDDII‘QO _..._..|.. , l-‘n—Huhfi.
lCharacter Pane - The Character Pane displays the character representation of the logical data bytes in
either ASCII, EBCDIC or Baudot.
lEvent Pane - The Event Pane displays the physical data bytes in the frame, as received on the network.
By default, all panes except the Event Pane are displayed when the Frame Display is first opened.
Protocol Tabs
Protocol filter tabs are displayed in the Frame Display above the Summary pane.
lThese tabs are arranged in separate color-
coded groups. These groups and their
colors are General (white), Classic
Bluetooth (blue), Bluetooth low energy
(green), 802.11 (orange), USB (purple),
NFC (brown) and SD (teal). The General
group applies to all technologies. The
other groups are technology-specific.
lClicking on a protocol filter tab in the General group filters in all packets containing that protocol
regardless of each packet’s technology.
lClicking on a protocol filter tab in a technology-specific group filters in all packets containing that protocol
on that technology.
lA protocol filter tab appears in the General group only if the protocol occurs in more than one of the
technology-specific tab groups. For example, if L2CAP occurs in both Classic Bluetooth and Bluetooth low
energy , there will be L2CAP tabs in the General group, the Classic Bluetooth group, and the Bluetooth
low energy group.
Select the Unfiltered tab to display all packets.
There are several special tabs that appear in the Summary Pane when certain conditions are met. These
tabs appear only in the General group and apply to all technologies. The tabs are:
lBookmarks appear when a bookmark is first seen.
lErrors appear when an error is first seen. An error is a physical error in a data byte or an error in the
protocol decode.
lInfo appears when a frame containing an Information field is first seen.
The tabs disappear when the capture buffer is cleared during live capture or when decoders are reloaded,
even if one of the tabs is currently selected. They subsequently reappear as the corresponding events are
detected.
Comparing Frames
If you need to compare frames, you can open additional Frame Display windows by clicking on the
Duplicate View icon . You can have as many Frame Display windows open at a time as you wish.
Frame Wrapping and Display
In order to assure that the data you are seeing in Frame Display are current, the following messages appear
describing the state of the data as it is being captured.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
40 Frontline BPA low energy Hardware & Software User Manual
Summary Bane ”0&1; ii =4: E ‘ofifil Summary pane Summary Bane
lAll Frame Display panes except the Summary pane display "No frame selected" when the selected
frame is in the buffer (i.e. not wrapped out) but not accessible in the Summary pane. This can happen
when a tab is selected that doesn’t filter in the selected frame.
lWhen the selected frame wraps out (regardless of whether it was accessible in the Summary pane) all
Frame Display panes except the Summary pane display "Frame wrapped out of buffer".
lWhen the selected frame is still being captured, all Frame Display panes except the Summary pane
display "Frame incomplete".
4.3.1.1 Frame Display Toolbar
The buttons that appear in the Frame Display window vary according to the particular configuration of the
analyzer. For controls not available the icons will be grayed-out.
Icon Description
Control – Brings the Control window to
the front.
Open File - Opens a capture file.
I/O Settings - Opens the I/O Settings
dialog.
Start Capture - Begins data capture to a
user designated file.
Stop Capture - Closes a capture file and
stops data capture to disk.
Save - Save the currently selected bytes
or the entire buffer to file.
Clear- Discards the temporary file and
clears the display.
Event Display – Brings the Event Display
window to the front.
Show Message Sequence Chart -
Message Sequence Chart (MSC)
displays information about the messages
passed between protocol layers.
Duplicate View - Creates a second Frame
Display window identical to the first.
Apply/Modify Display Filters - Opens the
Display Filter dialog.
Quick Protocol Filter - brings up a dialog
box where you can filter or hide one or
more protocol layers.
Table 4.1 - Frame Display Toolbar Icons
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 41
Tne foHowing icons aH change how the panes are arranged on the Frame Drsplay. Addrtional layouts are hsted in me Vrew menu.
Icon Description
Protocol Stack - brings up the Protocol
Stack Wizard where you can change the
stack used to decode framed data
Reload Decoders - When Reload
Decoders is clicked, the plug-ins are
reset and received frames are re-
decoded. For example, If the first frame
occurs more than 10 minutes in the past,
the 10-minute utilization graph stays
blank until a frame from 10 minutes ago or
less is decoded.
Find - Search for errors, string patterns,
special events and more.
Display Capture Notes - Brings up the
Capture Notes window where you can
view or add notes to the capture file.
Add/Modify Bookmark - Add a new or
modify an existing bookmark.
Display All Bookmarks - Shows all
bookmarks and lets you move between
bookmarks.
low energy Timeline- Opens the low
energy Timeline
Bluetooth low energy Packet Error Rate
Statistics Opens the Packet Error Rate
Statistics display
Bluetooth Classic Packet Error Rate
Statistics - Opens the Packet Error Rate
Statistics display.
Reload Decoders - When Reload Decoders is clicked, the plug-ins are reset
and received frames are re-decoded. For example, If the first frame occurs
more than 10 minutes in the past, the 10-minute utilization graph stays blank
until a frame from 10 minutes ago or less is decoded.
Filter: Text giving the filter currently in
use. If no filter is being used, the text
reads "All Frames" which means that
nothing is filtered out. To see the text of
the entire filter, place the cursor over the
text and a ToolTip pops up with the full
text of the filter.
The following icons all change how the panes are arranged on the Frame
Display. Additional layouts are listed in the View menu.
Table 4.1 - Frame Display Toolbar Icons(continued)
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
42 Frontline BPA low energy Hardware & Software User Manual
Icon Description
Show Default Panes - Returns the panes
to their default settings.
Show Only Summary Pane - Displays
only the Summary pane.
Shall All Panes Except Event Pane -
Makes the Decode pane taller and the
Summary pane narrower.
Toggle Display Lock - Prevents the
display from updating.
Go To Frame
First Frame - Moves to the first frame in
the buffer.
Previous Frame - Moves to the previous
frame in the buffer.
Next Frame - Moves to the next frame in
the buffer.
Last Frame - Moves to the last frame in
the buffer.
Find on Frame Display only searches the
Decode Pane for a value you enter in the
text box.
Find Previous Occurrence - Moves to the
previous occurrence of the value in the
Frame Display Find.
Find Next Occurrence - Moves to the next
occurrence of the value in the Frame
Display Find.
Cancel Current Search - Stops the
current Frame Display Find.
Table 4.1 - Frame Display Toolbar Icons(continued)
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 43
Summary: I Summa'y= ISummary. WW0 - BasebandwilhAuta-tmerse Note: If the flames are sorted in other than ascending flame number order, the order of the frames in the buffer is the sorted order. Therefore the last flame in the buffer may not have the last flame number.
Icon Description
Summary Drop Down Box: Lists all the
protocols found in the data in the file. This
box does not list all the protocol decoders
available to the analyzer, merely the
protocols found in the data. Selecting a
protocol from the list changes the
Summary pane to display summary
information for that protocol. When a low
energy predefined Named Filter (like
Nulls and Polls) is selected, the
Summary drop-down is disabled.
Text with Protocol Stack: To the right of the Summary Layer box is some text
giving the protocol stack currently in use.
Table 4.1 - Frame Display Toolbar Icons(continued)
Note: If the frames are sorted in other than ascending frame number order, the order of the
frames in the buffer is the sorted order. Therefore the last frame in the buffer may not have
the last frame number.
4.3.1.2 Frame Display Status Bar
The Frame Display Status bar appears at the bottom of the Frame Display. It contains the following
information:
lFrame #s Selected: Displays the frame number or numbers of selected (highlighted) frames, and the
total number of selected frames in parentheses
lTotal Frames: The total number of frames in the capture buffer or capture file in real-time
lFrames Filtered In: The total number of frames displayed in the filtered results from user applied filters
in real-time
4.3.1.3 Hiding and Revealing Protocol Layers in the Frame Display
Hiding protocol layers refers to the ability to prevent a layer from being displayed on the Decode pane.
Hidden layers remain hidden for every frame where the layer is present, and can be revealed again at any
time. You can hide as many layers as you wish.
Note: Hiding from the Frame Display affects only the data shown in the Frame Display and not any
information in any other window.
There are two ways to hide a layer.
1. Right-click on the layer in the Decode pane, and choose Hide [protocol name] Layer In All
Frames.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
44 Frontline BPA low energy Hardware & Software User Manual
Search/Find dialog. as m MEN mm F‘tev Elnkvaks (mm: Wndcw Feb H PM ‘7‘! 82 ll IDILJ ”EEID Emmmeooo “W 2‘ fiflfl Search/Find
2. Click the Set Protocol Filtering button on the Summary pane toolbar. In the Protocols to Hide
box on the right, check the protocol layer(s) you want hidden. Click OK when finished.
To reveal a hidden protocol layer:
1. Right-click anywhere in the Decode pane
2. Choose Show [protocol name] Layer from the right-click menu, or click the Set Protocol Filtering
button and un-check the layer or layers you want revealed.
4.3.1.4 Physical vs. Logical Byte Display
The Event Display window and Event Pane in the Frame Display window show the . In other words,
they show the actual data as it appeared on the circuit. The Radix, Binary and Character panes in the Frame
Display window show the , or the resulting byte values after escape codes or other character altering codes
have been applied (a process called ).
As an example, bytes with a value of less than 0x20 (the 0x indicates a hexadecimal value) cannot be
transmitted in Async PPP. To get around this, a 0x7d is transmitted before the byte. The 0x7d says to take the
next byte and subtract 0x20 to obtain the true value. In this situation, the Event pane displays 0x7d 0x23,
while the Radix pane displays 0x03.
4.3.1.5 Sorting Frames
By default, frames are sorted in ascending numerical sequence by frame number. Click on a column header
in the Summary pane to sort the frames by that column. For example, to sort the frames by size, click on the
Frame Size column header.
An embossed triangle next to the header name indicates which column the frames are sorted by. The
direction of the triangle indicates whether the frames are in ascending or descending order, with up being
ascending.
Note that it may take some time to sort large numbers of frames.
4.3.1.6 Frame Display - Find
Frame Display has a simple Find function that you can use to search the Decode Pane for any alpha
numeric value. This functionality is in addition to the more robust Search/Find dialog.
Frame Display Find is located below the toolbar on the Frame Display dialog.
Figure 4.6 - Frame Display Find text entry field
Where the more powerful Search/Find functionality searches the Decode,Binary,Radix, and Character
panes on Frame Display using TImestamps, Special Events, Bookmarks, Patterns, etc.,
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 45
Decode Pane [in Mint . ‘ Note: The text box is disabled during a live capture. OMS' ll- aanmmrui $71“!th I
Figure 4.7 - Search/Find Dialog
Find on Frame Display only searches the Decode Pane for a value you enter in the text box.
To use Find:
1. Select the frame where you want to begin the search.
2. Enter a value in the Find text box.
Note: The text box is disabled during a live capture.
3.
Select Find Previous Occurrence to begin the search on frames prior to the frame you
selected, or Find Next Occurrence to begin the search on frames following the frame you
selected.
The next occurrence of the value (if it is found) will be
highlighted in the Decode Pane.
4. Select Find Previous Occurrence or Find Next Occurrence
to continue the search.
There are several important concepts to remember with Find.
lWhen you enter a search string and select Enter, the search moves forward.
lIf you select Find Previous Occurrence, when the search reaches the first frame it will then cycle to
the last frame and continue until it reaches the frame where the search began.
lShift + F3 is a shortcut for Find Previous Occurrence.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
46 Frontline BPA low energy Hardware & Software User Manual
Tutal Franesfl ES. Pram Fteled In: \ 259‘ Frametssdected: ‘ 201; (1 Sarah for "Antanna: Tnn' mulxs' '“Found‘” ul'lE
lIf you select Find Next Occurrence, when the search reaches the last frame it will then cycle to the first
frame and continue until it reaches the frame where the search began.
lF3 is a shortcut for Find Next Occurrence.
lYou cannot search while data is being captured.
lAfter a capture is completed, you cannot search until Frame Display has finished decoding the frames.
lFind is not case sensitive.
lThe status of the search is
displayed at the bottom of the
dialog.
lThe search occurs only on the
protocol layer selected.
lTo search across all the protocols on the Frame Display, select the Unfiltered tab.
lA drop-down list displays the search values entered during the current
session of Frame Display.
lThe search is cancelled when you select a different protocol tab during
a search.
lYou can cancel the search at any time by selecting the Cancel Current
Search button.
4.3.1.7 Synchronizing the Event and Frame Displays
The Frame Display is synchronized with the Event Display. Click on a frame in the Frame Display and
the corresponding bytes is highlighted in the Event Display. Each Frame Display has its own Event
Display.
As an example, here's what happens if the following sequence of events occurs.
1. Click on the Frame Display icon in Control window toolbar to open the Frame Display.
2. Click on the Duplicate View icon to create Frame Display #2.
3. Click on Event Display icon in Frame Display #2. Event Display #2 opens. This Event
Display is labeled #2, even though there is no original Event Display, to indicate that it is
synchronized with Frame Display #2.
4. Click on a frame in Frame Display #2. The corresponding bytes are highlighted in Event Display
#2.
5. Click on a frame in the original Frame Display.Event Display #2 does not change.
4.3.1.8 Working with Multiple Frame Displays
Multiple Frame Displays are useful for comparing two frames side by side. They are also useful for comparing
all frames against a filtered subset or two filtered subsets against each other.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 47
Note: When you create a filter in one Frame Display, that filter does not automatically appear in the other Frame Display. You must use the Hide/Reveal feature to display a filter created in one Frame Display in another. Note: When you have multiple Frame Display windows open and you are capturing data, you may receive an error message declaring that "Filtering cannot be done while receiving data this fast." If this occurs, you may have to stop filtering until the data is captured.
lTo create a second Frame Display, click the Duplicate View icon on the Frame Display toolbar.
This creates another Frame Display window. You can have as many Frame Displays open as you
wish. Each Frame Display is given a number in the title bar to distinguish it from the others.
lTo navigate between multiple Frame Displays, click on the Frame Display icon in the Control
window toolbar.
A drop-down list appears, listing all the currently open Frame Displays.
lSelect the one you want from the list and it comes to the front.
Note: When you create a filter in one Frame Display, that filter does not automatically
appear in the other Frame Display. You must use the Hide/Reveal feature to display a
filter created in one Frame Display in another.
Note: When you have multiple Frame Display windows open and you are capturing data,
you may receive an error message declaring that "Filtering cannot be done while receiving
data this fast." If this occurs, you may have to stop filtering until the data is captured.
4.3.1.9 Working with Panes on Frame Display
When the Frame Display first opens, all panes are displayed except the Event pane (To view all the panes,
select Show All Panes from the View menu).
lThe Toggle Expand Decode Pane icon makes the decode pane longer to view lengthy decodes
better.
lThe Show Default Panes icon returns the Frame Display to its default settings.
lThe Show only Summary Pane icon displays on the Summary Pane.
To close a pane, right-click on the pane and select Hide This Pane from the pop-up menu, or de-select
Show [Pane Name] from the View menu.
To open a pane, right-click on the any pane and select Show Hidden Panes from the pop-up menu and
select the pane from the fly-out menu, or select Show [Pane Name] from the View menu.
To re-size a pane, place the cursor over the pane border until a double-arrow cursor appears. Click and drag
on the pane border to re-size the pane.
4.3.1.10 Frame Display - Byte Export
The captured frames can be exported as raw bytes to a text file.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
48 Frontline BPA low energy Hardware & Software User Manual
9 pm my» I. (mm mm ms) mxmdrmrmw (inlm “my. Mum I I. (mafia: M munimrmjmynjlmdz 2 mmmmm. 3 emwma- : cmmommsd. Bytgfxpnn meflsfvflnhmhl‘xfidflhfl: arm-s 454mm E]-
1. From the Frame Display File menu select Byte Export....
Figure 4.8 - Frame Display File menu, Byte Export
2. From the Byte Export window specify the frames to export.
lAll Frames exports all filtered-in frames including those scrolled off the Summary pane. Filtered-
in frames are dependent on the selected Filter tab above the Summary pane. Filtered-out
frames are not exported.
lSelected Frames export is the same as All Frames export except that only frames selected in the
Summary pane will be exported.
Figure 4.9 - Byte Export dialog
Click the OK button to save the export. Clicking the Cancel button will exit Byte Export.
3. The Save As dialog will open. Select a directory location and enter a file name for the exported
frames file.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 49
Pane owns agfiw x . x, y—xxwxm p Maddie D'er-xv xz *rmam-x lost; I mudum an...“ mm. xxxsxa. Kvkmuu mm. gamnlmrmvd xx. in ram m Hop m mun ax axx (lluxtdrnl (Kn-K: can“: Elk xxxxx uh 'anlluxed' 1,255 m.“ (mama "k , xmaxxxxa shrunk) Ina-K Mnxxflmmm mm, naps! xxnixxarmxiaxxxmimvcxs- 1.71512“; s 23.9“”. mun xx 122 an xs a. as xx x9 I: xx xx 7x 56 xx ch «7 9n n mmma s 23.9mm mxx xx .x as xs a. as xx x9 I: xx xx 7x 56 xx ch «7 9n n anislma s 2“st me: xx :23 an xs a. as xx x9 I: xx xx 7x 56 xx ch «7 9n n mmma s 23.961“: mun xx 122 an xs a. as xx x9 I: xx xx 7x 56 xx ch «7 9n n snis/ma s 23.965D66 mxx xx .x as xs a. as xx x9 I: xx xx 7x 56 xx ch «7 9n n 6.71512“; s 23.96“” me: xx 127 an xs a. as xx x9 I: xx xx 7x 56 xx ch «7 9n n V x .x x r Decode
Figure 4.10 - Save As dialog
Click on the Save button.
The exported frames are in a text file that can be opened in any standard text editing application. The header
shows the export type, the capture file name, the selected filter tab, and the number of frames. The body
shows the frame number, the timestamp in the same format shown in the Frame Display Summary pane,
and the frame contents as raw bytes.
Figure 4.11 - Sample Exported Frames Text File
4.3.1.11 Panes in the Frame Display
4.3.1.11.1 Summary Pane
The Summary pane displays a one-line summary of every frame in a capture buffer or file, including
frame number, timestamp, length and basic protocol information. The protocol information included for each
frame depends on the protocol selected in the summary layer box (located directly below the main toolbar).
On a two-channel circuit, the background color of the one-line summary indicates whether the frame came
from the DTE or the DCE device. Frames with a white background come from the DTE device, frames with a
gray background come from the DCE device.
Frame numbers in red indicate errors, either physical (byte-level) or frame errors. If the error is a frame
error in the displayed protocol layer, the bytes where the error occurred is displayed in red. The Decode
Pane gives precise information as to the type of error and where it occurred.
The Summary pane is synchronized with the other panes in this window. Click on a frame in the Summary
pane, and the bytes for that frame is highlighted in the Event pane while the Decode pane displays the full
decode for that frame. Any other panes which are being viewed are updated accordingly. If you use one pane
to select a subset of the frame, then only that subset of the frame is highlighted in the other panes.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
50 Frontline BPA low energy Hardware & Software User Manual
Go To “
Protocol Tabs
Protocol filter tabs are displayed in the Frame Display above the Summary pane.
lThese tabs are arranged in separate color-coded groups. These groups and their colors are General
(white), Classic Bluetooth (blue), Bluetooth low energy (green), 802.11 (orange), USB (purple), and SD
(brown). The General group applies to all technologies. The other groups are technology-specific.
Figure 4.12 - Example Protocol Tags
lClicking on a protocol filter tab in the General group filters in all packets containing that protocol
regardless of each packet’s technology.
lClicking on a protocol filter tab in a technology-specific group filters in all packets containing that protocol
on that technology.
lA protocol filter tab appears in the General group only if the protocol occurs in more than one of the
technology-specific tab groups. For example, if L2CAP occurs in both Classic Bluetooth and Bluetooth low
energy , there will be L2CAP tabs in the General group, the Classic Bluetooth group, and the Bluetooth low
energy group.
Select the Unfiltered tab to display all packets.
There are several special tabs that appear in the Summary pane when certain conditions are met. These
tabs appear only in the General group and apply to all technologies. The tabs are:
lBookmarks appear when a bookmark is first seen.
lErrors appear when an error is first seen. An error is a physical error in a data byte or an error in the
protocol decode.
lInfo appears when a frame containing an Information field is first seen.
The tabs disappear when the capture buffer is cleared during live capture or when decoders are reloaded,
even if one of the tabs is currently selected. They subsequently reappear as the corresponding events are
detected.
The tabs disappear when the capture buffer is cleared during live capture or when decoders are reloaded,
even if one of the tabs is currently selected. They subsequently reappear as the corresponding events are
detected.
Use the navigation icons, keyboard or mouse to move through the frames. The icons and move
you to the first and last frames in the buffer, respectively. Use the Go To icon to move to a specific
frame number.
Placing the mouse pointer on a summary pane header with truncated text displays a tooltip showing the full
header text.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 51
a "new mummy: m ... m m n. ........ w. w... m, 0 I‘PE'I V‘NQZ‘I In)»: HIE-5L1.- Jflmmm A IDEIOOOO m V ‘5; Wm «m h...“ M... yum—unmfluum‘ 127*“ “mm Imam-mm:ln—nmnmfl-nrmmlmuuvnVH-‘Il mummummn ”WWW-V" I‘m-“M "m. "m"-.. , mu- umu—fl my”.
Figure 4.13 - Summary pane (right) with Tooltip on Column 5 (Tran ID)
Sides in Bluetooth low energy
A Bluetooth low energy data connection consists of connection events, which are a series of transmissions on
the same channel. In each connection event the master transmits first, then the slave, and then the devices
take turns until the connection event is finished.
When the data connection is encrypted and the packets are successfully decrypted, the sniffer can determine
exactly who sent which packet (only non-empty, encrypted packets – empty packets are never encrypted).
These packets are labeled either ‘M’ for master or ‘S’ for slave.
When the data connection is unencrypted or when encrypted packets are not successfully decrypted by the
sniffer, the sniffer cannot distinguish the two devices’ (master and slave) packets by their content, just by the
packet timing. In those cases we label each device as side ‘1’ or ‘2’, not as master or slave. In each connection
event, packets sent by the device which transmitted first in the connection event are labeled ‘1’, and packets
sent by the device which transmitted second are labeled ‘2’.
If no packets in the connection event are missed by the sniffer, the device labeled ‘1’ is the master and the
device labeled ‘2’ is the slave. However, if we do not capture the very first packet in a connection event (i.e.
the packet sent by the master) but do capture the packet sent by the slave, we label the slave as side ‘1’ since
it is the first device we heard in the connection event. Because there is potential clock drift since the last
connection event, we cannot use the absolute timing to correct this error; there would still be cases where
we get it wrong. Therefore we always assign ‘1’ to the first packet in a connection event. So even though it is
rare, there are connection events where packets sent by the slave device are labeled ‘1’ and packets sent by
the master are labeled ‘2’.
Finally, in a noisy environment it is also possible that the sniffer does not capture packets in the middle of a
connection event. If this occurs and the sniffer cannot determine the side for the remaining packets in that
connection event, the side is labeled ‘U’ for “unknown”.
4.3.1.11.2 Bluetooth low energy Data Encryption/Master and Slave
Assignment
A Bluetooth low energy data connection consists of connection events, which are a series of transmissions on
the same channel. In each connection event the master transmits first, then the slave, and then the devices
take turns until the connection event is finished.
When the data connection is encrypted and the packets are successfully decrypted, the sniffer can determine
exactly who sent which packet (only non-empty, encrypted packets – empty packets are never encrypted).
These packets are labeled either ‘M’ for master or ‘S’ for slave.
When the data connection is unencrypted or when encrypted packets are not successfully decrypted by the
sniffer, the sniffer cannot distinguish the two devices’ (master and slave) packets by their content, just by the
packet timing. In those cases we label each device as side ‘1’ or ‘2’, not as master or slave. In each
connection event, packets sent by the device which transmitted first in the connection event are labeled ‘1’,
and packets sent by the device which transmitted second are labeled ‘2’.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
52 Frontline BPA low energy Hardware & Software User Manual
If no packets in the connection event are missed by the sniffer, the device labeled ‘1’ is the master and the
device labeled ‘2’ is the slave. However, if we do not capture the very first packet in a connection event (i.e.
the packet sent by the master) but do capture the packet sent by the slave, we label the slave as side ‘1’ since
it is the first device we heard in the connection event. Because there is potential clock drift since the last
connection event, we cannot use the absolute timing to correct this error; there would still be cases where
we get it wrong. Therefore we always assign ‘1’ to the first packet in a connection event. So even though it is
rare, there are connection events where packets sent by the slave device are labeled ‘1’ and packets sent by
the master are labeled ‘2’.
Finally, in a noisy environment it is also possible that the sniffer does not capture packets in the middle of a
connection event. If this occurs and the sniffer cannot determine the side for the remaining packets in that
connection event, the side is labeled ‘U’ for “unknown”.
4.3.1.11.3 Bluetooth low energy Decryption Status
Occasionally you may have a packet with an event status of “received without errors,” but a decryption status
of “unable to decrypt.” There are three main causes for this, and in order of likelihood they are:
1. Wrong Long-Term Key – having the wrong long-term key will cause this error, so the first thing to
check is that your long term key is entered correctly in the datasource settings.
2. Dropped Packets – Too much interference with a ComProbe device will cause dropped packets and
may cause this error. As a rule of thumb, it is always a good idea to ensure the ComProbe device is
positioned away from sources of interference, and is placed in between the two devices being sniffed.
3. Faulty Device – although the chances of this are low, it is possible that a device is not encrypting
packets properly. This is likely to happen only if you are a firmware developer working on encryption.
4.3.1.11.4 Customizing Fields in the Summary Pane
You can modify the Summary Pane in Frame Display.
Summary pane columns can be reordered by dragging any column to a different position.
Fields from the Decode pane can be added to the summary pane by dragging any Decodepane field to the
desired location in the summary pane header. If the new field is from a different layer than the summary
pane a plus sign (+) is prepended to the field name and the layer name is added in parentheses. The same
field can be added more than once if desired, thus making it possible to put the same field at the front and
back (for example) of a long header line so that the field is visible regardless of where the header is scrolled
to.
An added field can be removed from the Summary pane by selecting Remove New Column from the
right-click menu.
The default column layout (both membership and order) can be restored by selecting Restore Default
Columns from the Format or right-click menus.
Changing Column Widths
To change the width of a column:
1. Place the cursor over the right column divider until the cursor changes to a solid double arrow.
2. Click and drag the divider to the desired width.
3. To auto-size the columns, double-click on the column dividers.
Hiding Columns
To hide a column:
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 53
1. Drag the right divider of the column all the way to the left.
2. The cursor changes to a split double arrow when a hidden column is present.
3. To show the hidden column, place the cursor over the divider until it changes to a split double arrow,
then click and drag the cursor to the right.
4. The Frame Size,Timestamp, and Delta columns can be hidden by right-clicking on the header and
selecting Show Frame Size Column, Show Timestamp Column, or Show Delta Column.
Follow the same procedure to display the columns again.
Moving Columns - Changing Column Order
To move a column :
1. Click and hold on the column header
2. Drag the mouse over the header row.
3. A small white triangle indicates where the column is moved to.
4. When the triangle is in the desired location, release the mouse.
Restoring Default Column Settings
To restore columns to their default locations, their default widths, and show any hidden columns
1. Right-click on any column header and choose Restore Default Column Widths, or select Restore
Default Column Widths from the Format menu.
4.3.1.11.5 Frame Symbols in the Summary Pane
Symbol Description
A green dot means the frame was decoded successfully, and the protocol listed in the Summary
Layer drop-down box exists in the frame. No dot means the frame was decoded successfully, but
the protocol listed in the Summary Layer drop-down box does not exist in the frame.
A green circle means the frame was not fully decoded. There are several reasons why this might
happen.
lOne reason is that the frame compiler hasn't caught up to that frame yet. It takes some time
for the analyzer to compile and decode frames. Frame compilation also has a lower priority
than other tasks, such as capturing data. If the analyzer is busy capturing data, frame
compilation may fall behind. When the analyzer catches up, the green circle changes to either
a green dot or no dot.
lAnother reason is if some data in the frame is context dependent and we don't have the
context. An example is a compressed header where the first frame gives the complete
header, and subsequent frames just give information on what has changed. If the analyzer
does not capture the first frame with the complete header, it cannot decode subsequent
frames with partial header information.
A magenta triangle indicates that a bookmark is associated with this frame. Any comments
associated with the bookmark appear in the column next to the bookmark symbol.
Table 4.2 - Frame Symbols
4.3.1.11.6 Decode Pane
The Decode pane (aka detail pane) is a post-process display that provides a detailed decode of each
frame transaction (sometimes referred to as a frame). The decode is presented in a layered format that can
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
54 Frontline BPA low energy Hardware & Software User Manual
lv/ EpidAlands Hid: 'LZCAP" layuh All Prams Provide AVDTP «.15.. Logical Bfie Diselay Colors Physical v5. Logical Byte Display Colors Physical vs. ow mz>1 x-u): Imfln>x>:ol m2"! nmun>a>=n color This is the Radix Pane Copy Seludion to Cl'pboard Select Emil Flam: Change Tat Hgllign Color- Hminal Decinfl Odd This is the Character Pane Copy Sdgclion m Cipboanl sum Ernie Flam: Change Test My” Calm... ASOI 74mm Encmc Baudot
be expanded and collapsed depending on which layer or layers you are most interested in. Click on the plus
sign to expand a layer. The plus sign changes to a minus sign. Click on the minus sign to collapse a layer. Select
Show All or Show Layers from the Format menu to expand or collapse all the layers. Layers retain their
expanded or collapsed state between frames.
Protocol layers can be hidden, preventing them from being
displayed on the Decode pane. Right-click on any protocol
layer and choose Hide [protocol name] from the right-click
menu.
Each protocol layer is represented by a color, which is used
to highlight the bytes that belong to that protocol layer in the
Event,Radix,Binary and Character panes. The colors are not assigned to a protocol, but are assigned to
the layer.
The Event,Radix,Binary,Character and Decode panes are all synchronized with one another. Clicking on
an element in any one of the panes highlights the corresponding element in all the other panes.
Click the Toggle Expand Decode Pane icon to make the Decode pane taller. This allows for more of
a lengthy decode to be viewed without needing to scroll.
4.3.1.11.7 Radix or Hexadecimal Pane
The Radix pane displays the logical bytes in the frame in
either hexadecimal, decimal or octal. The radix can be
changed from the Format menu, or by right-clicking on the
pane and choosing Hexadecimal,Decimal or Octal.
Because the Radix pane displays the logical bytes rather
than the physical bytes, the data in the Radix pane may be
different from that in the Event pane. See Physical vs.
Logical Byte Display for more information.
Colors are used to show which protocol layer each byte
belongs to. The colors correspond to the layers listed in the
Decode pane.
The Event, Radix, Binary, Character and Decode panes are all synchronized with one another. Clicking on an
element in any one of the panes highlights the corresponding element in all the other panes.
4.3.1.11.8 Character Pane
The Character pane represents the logical bytes in the
frame in ASCII,EBCDIC or Baudot. The character set
can be changed from the Format menu, or by right-
clicking on the pane and choosing the appropriate
character set.
Because the Character pane displays the logical bytes
rather than the physical bytes, the data in the Character
pane may be different from that in the Event pane. See
Physical vs. Logical Byte Display for more information.
Colors are used to show which protocol layer each byte
belongs to. The colors correspond to the layers listed in
the Decode pane.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 55
Physical vs. Logical Byte Display Colors < .="" e="" ii]:="" o="" this="" is="" the="" event="" pane="" r="" cow="" sdzdion="" h:="" cl'pboald="" sded="" ernie="" flam:="" change="" in="" ago-59m="" calm.="" d'splayai="" events="" mz="">1 Physical vs. Logical Byte Display Colors
The Event,Radix,Binary,Character and Decode panes are all synchronized with one another. Clicking on
an element in any one of the panes highlights the corresponding element in all the other panes.
4.3.1.11.9 Binary Pane
The Binary pane displays the logical bytes in the frame in binary.
Because the Binary pane displays the logical bytes rather than the physical bytes, the data in the Binary pane
may be different from that in the Event pane. See Physical vs. Logical Byte Display for more information.
Colors are used to show which protocol layer each byte belongs to. The colors correspond to the layers listed
in the Decode pane.
The Event,Radix,Binary,Character and Decode panes are all synchronized with one another. Clicking on
an element in any one of the panes highlights the corresponding element in all the other panes.
4.3.1.11.10 Event Pane
The Event pane shows the physical
bytes in the frame. You can choose
between displaying only the data
events or displaying all events by
clicking the All Events icon .
Displaying all events means that special
events, such as Start of Frame,End
of Frame and any signal change
events, are displayed as special
symbols within the data.
The status lines at the bottom of the pane give the same information as the status lines in the Event Display
window. This includes physical data errors, control signal changes (if appropriate), and timestamps.
Because the Event pane displays the physical bytes rather than the logical bytes, the data in the Event pane
may be different from that in the Radix,Binary and Character panes. See Physical vs. Logical Byte Display
for more information.
Colors are used to show which protocol layer each byte belongs to. The colors correspond to the layers listed
in the Decode pane.
The Event,Radix,Binary,Character and Decode panes are all synchronized with one another. Clicking
on an element in any one of the panes highlights the corresponding element in all the other panes.
4.3.1.11.11 Change Text Highlight Color
Whenever you select text in the Binary,Radix, or
Character panes in Frame Display, the text is
displayed with a highlight color. You can change the
color of the highlight.
1. Select Change Text Highlight Color from
the Options menu. You can also access the
option by right clicking in any of the panes.
2. Select a color from the drop-down menu.
3. Click OK.
The highlight color for the text is changed.
Select Cancel to discard any selection. Select Defaults to return the highlight color to blue.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
56 Frontline BPA low energy Hardware & Software User Manual
change the default colors W hiya Colo! Sew Layev 1: Lays! a: Law 2' qu 1U- Layer 3. Layev 11. Layev 4: Layer 12: Law 5: Lave: 13: Layer 1; Layev 14 Layev 7: Layer 15: Lays! a: Lays! 15:
4.3.1.12 Protocol Layer Colors
4.3.1.12.1 Data Byte Color Notation
The color of the data in the panes specifies which layer of the protocol stack the data is from. All data from
the first layer is bright blue, the data from the second layer is green, the third layer is pink, etc. The protocol
name for each layer in the Decode pane is in the same color. Note that the colors refer to the layer, not to a
specific protocol. In some situations, a protocol may be in two different colors in two different frames,
depending on where it is in the stack. You can change the default colors for each layer.
Red is reserved for bytes or frames with errors. In the Summary pane, frame numbers in red mean there is
an error in the frame. Also, the Errors tab is displayed in red. This could be a physical error in a data byte or
an error in the protocol decode. Bytes in red in the Radix,Character,Binary and Event panes mean there
is a physical error associated with the byte.
4.3.1.12.2 Red Frame Numbers and Bytes
Red is reserved for bytes or frames with errors. In the Summary pane, frame numbers in red mean there is
an error in the frame. This could be a physical error in a data byte or an error in the protocol decode.
4.3.1.12.3 Changing Protocol Layer Colors
You can differentiate different protocol layers in the Decode,Event,Radix,Binary and Character panes.
1. Choose Select Protocol Layer Colors from the Options menu to change the colors used.
The colors for the different layers is displayed.
2. To change a color, click on the arrow next to each layer and select a new color.
3. Select OK to accept the color change and return to Frame Display.
Select Cancel to discard any selection. Select Defaults to return the highlight colors to the default settings.
Figure 4.14 - Frame Display Protocol Layer Color Selector
4.3.1.13 Filtering
Filtering allows the user to control the display which capture frames are displayed. Filters fall into two general
categories:
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 57
1. Display filters allow a user to look at a subset of captured data without affecting the capture content.
Frames matching the filter criteria appear in the Frame Display; frames not matching the criteria
will not appear.
2. Connection filters Two options are available.
a. A Bluetooth connection: Displays only the frames associated with a Classic Bluetooth link or a
Bluetooth low energy access address. A new Frame Display will open showing only the
protocol tabs, frames, summary, and events associated with that particular Bluetooth
connection.
b. A specific wireless or wired technology. Displays all of the frames associated with:
lClassic Bluetooth
lBluetooth low energy
l802.11
lHCI
A new Frame Display will open showing only the protocol tabs, frames, summary and events
associated with the selected technology.
4.3.1.13.1 Display Filters
A display filter looks at frames that have already been captured. It looks at every frame in the capture buffer
and displays those that match the filter criteria. Frames that do not match the filter criteria are not displayed.
Display filters allow a user to look at a subset of captured data without affecting the capture content. There
are three general classes of display filters:
lProtocol Filters
lNamed Filters
lQuick Filter
Protocol Filters
Protocol filters test for the existence of a specific single layer. The system creates a protocol filter for each
decoder that is loaded if that layer is encountered in a capture session.
There are also three special purpose filters that are treated as protocol filters:
lAll Frames with Errors
lAll Frames with Bookmarks
lAll Special Information Nodes
Named Filters
lNamed filters test for anything other than simple single layer existence. Named filters can be constructed
that test for the existence of multiple layers, field values in layers, frame sizes, etc., as well as
combinations of those things. Named filters are persistent across sessions.
lNamed filters are user-defined. User-defined filters persist in a template file. User defined filters can be
deleted.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
58 Frontline BPA low energy Hardware & Software User Manual
5a mmm E cummwnn wnmm» mm. ‘ 1mm 2mm am Kath hm mammal v AVETP . ran . Emman‘i/Relvflme . thPv-‘em . Ewmew 5mm." E BE WWWMW mm mung HEX-2mg mama” Saheleachlvame mlmvmge v m m 2344 Enmdzumfl‘mmbm: bylwng n m: Mm mm, and hpedemma‘ mm m slam": m. nmvbev w» my mm] _[ cm H Ha, 1 ~—
Quick Filters
lQuick Filters are combinations of Protocol Filters and/or Named Filters that are displayed on the Quick
Filter tab.
lQuick Filters cannot be saved and do not persist across sessions.
lQuick Filters are created on the Quick Filter Dialog.
4.3.1.13.1.1 Creating a Display Filter
There are two steps to using a display filter. Define the filter conditions, and then apply the filter to the data
set. The system combines both filter definition and application in one dialog.
1. Click the Display Filters icon on the Frame Display window or select Apply/Modify
Display Filters from the Filter menu to open the Set Condition dialog box. The Set Condition
dialog is self configuring which means that when you Select each frame under Conditions the
following displayed fields depend on your selection. With each subsequent selection the dialog fields
will change depending on you selection in that field.
Figure 4.15 - Example: Set Conditions Self Configuring Based on Protocol Selection
Figure 4.16 - Example: Set Conditions Self Configuring Based on Frame Range
2. Select Include or Exclude to add filtered data or keep out filtered data respectively.
3. Select the initial condition for the filter from the drop-down list.
4. Set the parameters for the selected condition in the fields provided. The fields that appear in the
dialog box are dependent upon the previous selection. Continue to enter the requested parameters in
the fields provided until the condition statement is complete.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 59
Quick Filtering and Hiding Protocols multigle Frame Disglax windows Hide/Reveal Quick Filtering Quick Filtering
5. Click OK. The system displays the Save Named Condition dialog. Provide a name for the filter
condition or accept the default name provided by the system and click OK. Prohibited characters are
left bracket '[', right bracket ']' and equal sign '='. The Set Condition dialog box closes, creates a tab
on the Frame Display with the filter name, and applies the filter.
The filter also appears in the Quick Filtering and Hiding Protocols dialog.
When a display filter is applied, a description of the filter appears to the right of the toolbar in the Frame
Display windows.
Notes:
lThe system requires naming and saving of all filters created by the user.
lThe OK button on the Set Condition dialog box is unavailable (grayed out) until the condition selections
are complete.
lWhen you have multiple Frame Display windows with a display filter or filters, those filter do not
automatically appear in other Frame Display windows. You must use the Hide/Reveal feature to display
a filter created in one Frame Display in different Frame Display window.
4.3.1.13.1.2 Including and Excluding Radio Buttons
All filter dialog boxes contain an Include and an Exclude radio button. These buttons are mutually exclusive.
The Include/Exclude selection becomes part of the filter definition, and appears as part of the filter
description displayed to the right of the Toolbar.
Include: A filter constructed with the "Include" button selected, returns a data set that includes frames that
meet the conditions defined by the filter and omits frames that do not.
Exclude: A filter constructed with the "Exclude" button selected, returns a data set that excludes frames that
meet the conditions defined by the filter and consists of frames that do not.
4.3.1.13.1.3 Named Display Filters
You can create a unique display filter by selecting a data type on the Frame Display and using a right click
menu. When you create a Name Filter, it appears in the Quick Filtering dialog, where you can use it do
customize the data you see in the Frame Display panes.
1. Select a frame in the Frame Display Summary Pane.
2. Right click in the one of the data columns in the Summary Pane: CRC, NESN, DS, Packet Success,
Ethertype, Source Address, etc.
3. Select Filter in (data type) =. The Filtering
Results dialog appears.
4. Enter a name for the filter
5. Select OK.
The filter you just created appears in the Named Filters
section of the Quick Filtering dialog.
4.3.1.13.1.4 Using Compound Display
Filters
Compound filters use boolean logic to create complex and precise filters. There are three primary Boolean
logic operators: AND,OR, and NOT.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
60 Frontline BPA low energy Hardware & Software User Manual
Condition — where the protocol ‘v, Select each lrame i iiieie tip:— HDhjiZU‘ with the conversation in the vange with the size [ NOT lililzli i 5 E Mien ] AND)... wheie the piotocol maxim AND
The AND operator narrows the filter, the OR operator broadens the filter, and the NOT operator excludes
conditions from the filtered results. Include parentheses in a compound filter to nest condition sets within
larger condition sets, and force the filter-processing order.
There are two steps to using a compound filter. Define the filter conditions, and then apply the filter to the
data set. The analyzer combines both filter definition and application in one dialog.
1. Click the Display Filters icon on the Frame Display window or select Apply/Modify
Display Filters… from the filter menu to open the Set Condition dialog box.
2. Click the Advanced button on the Set Condition dialog box.
3. Select Include or Exclude radio button.
Now you can set the conditions for the filter.
4. Select the initial condition for the filter from
the combo box at the bottom of the dialog for
Select each frame.
5. Set the parameters for the selected condition
in the fields provided. The fields that appear in
the dialog box are dependent upon the
previous selection. Continue to enter the
requested parameters in the fields provided
until the conditions statement is complete.
Figure 4.17 - Two Filter Conditions Added with an AND Operator
6. Click the plus icon on the left side of the dialog box and repeat steps 4 and 5 for the next
condition. Use the up and down arrow icons on the left side of the dialog box to order your
conditions, and the delete button to delete conditions from your filter.
7. Continue adding conditions until your filter is complete.
8. Include parentheses as needed and set the boolean operators.
9. Click OK.
10. The system displays the Save Named Condition dialog. Provide a name for the filter condition or
accept the default name provided by the system and click OK.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 61
Save Name d Condition Name This Condition: User Defined Conditions: l FilteiU Filter: Include each Frame was the protucul Data exists Note: The OK button on the Set Condition dialog box is unavailable (grayed out) until the condition selections are complete. Note: The OK button is unavailable (grayed out) until the condition selections are complete.
Figure 4.18 - Save Named Filter Condition Dialog
The Set Condition dialog box closes, creates a tab on the Frame Display with the filter name, and applies
the filter.
When a display filter is applied, a description of the
filter appears to the right of the toolbar in the
Frame Display windows.
Note: The OK button on the Set Condition dialog box is unavailable (grayed out) until the
condition selections are complete.
4.3.1.13.1.5 Defining Node and Conversation Filters
There are two steps to using Node and Conversation display filter. Define the filter conditions, and then apply
the filter to the data set. The analyzer combines both filter definition and application in one dialog.
1. Click the Display Filters icon on the Frame Display window or select Apply/Modify
Display Filters… from the filter menu to open the Set Condition dialog box.
2. From the Select each frame combo box choose frames with the conversation as the initial
condition.
3. Select an address type—IP, MAC, TCP/UDB—from the Typecombo box (The address type selection
populates both Address combo boxes with node address in the data set that match the type selection).
4. Select a node address from the first Address combo box.
5. Choose a direction arrow from the direction box . The left arrow filters on all frames
where the top node address is the destination, the right arrow filters on all frames
where the top node address is the source, and the double arrow filters on all
frames where the top node address is either the source or the destination.
6. If you want to filter on just one node address, skip step 7 and continue with step 8.
7. If you want to filter on traffic going between two address nodes (i.e. a conversation), select a node
address from the second Address combo box..
8. Click OK. The Set Condition dialog box closes and the analyzer applies the filter.
When a display filter is applied, a description of the filter appears to the right of the toolbar in the Frame
Display windows.
Note: The OK button is unavailable (grayed out) until the condition selections are
complete.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
62 Frontline BPA low energy Hardware & Software User Manual
Delete Hide Show/Hide Mme Use! Defined Enndmans ASEH 3 Mam raw FM FM raw Puma Ra‘s S‘ave scu W Suvvmsd Phi W F: miafmkumm'ummmhmt El
4.3.1.13.1.6 The Difference Between Deleting and Hiding Display Filters
If you wish to remove a filter from the system permanently, then use the Delete procedure. However, if all
you want to do is remove a filter as a means to un-clutter the display, then use the Hide procedure.
Deleting a saved filter removes the filter from the current session and all subsequent sessions. In order to
retrieve a deleted filter, the user must recreate it using the Set Conditions dialog.
Hiding a filter merely removes the filter from the display. A hidden filter can be reapplied using the
Show/Hide procedure.
Deleting Saved Display Filters
1. Select Delete Display Filters from the
Filter menu in the Frame Display
window to open the Delete Named
Condition dialog. The system displays the
Delete Named Condition dialog with a
list of all user defined filters.
2. Select the filter to be deleted from the list.
3. Click the Delete button.
4. Click OK. The Delete Named Condition
dialog box closes and the system deletes
the filter.
Hiding and Revealing Display Filters
If a display filter is showing the following steps will
hide that filter but will not delete it.
1. Select Hide/Show Display
Filters… from the Filter menu on
the Frame Display window
to open the Hide/Show Filters
dialog. The system displays the
Hide/Show Filters dialog with a
list of all user defined filters.
2. Select the filter to be hidden from
the combo box.
3. Click the Hide button. The Hide button is only showing if the selected filter is currently showing in the
Frame Display.
4. Click OK. The Hide/Show Filters dialog box closes, and the system hides the filter and removes the
filter tab from the Frame Display.
If a display filter is hidden the following steps will reveal that filter in the Frame Display.
1. Select Hide/Show Display Filters… from the Filter menu in the Frame Display window to
open the Hide/Show Filters dialog. The system displays the Hide/Show Filters dialog with a list of
all user defined filters.
2. Select the filter to be revealed from the combo box.
3. Click the Show button.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 63
Quick Filter N amed Filters Filters ASCII 3 ¥ Filterl _ Filter2 Filter7 Role: Slave : 5 ED link: Supported : Filter3 Note: When you have multiple Frame Display windows with a display filter or filters, those filter do not automatically appear in other Frame Display windows. You must use the Hide/Show dialog to display a filter created in one Frame Display in different Frame Display window. aym Note: When a display filter is applied, a description of the filter appears to the right of the toolbar in the Frame Display windows.
4. Click OK. The Hide/Show Filters dialog box closes and the system reveals the filter in the Frame
Display.
You can also open the Quick Filter dialog and check the box next to the hidden filter to show or hide a display
filter.
Figure 4.19 - Using Named Filters Section of Quick Filters to Show/Hide Filters
Note: When you have multiple Frame Display windows with a display filter or filters, those
filter do not automatically appear in other Frame Display windows. You must use the
Hide/Show dialog to display a filter created in one Frame Display in different Frame
Display window.
4.3.1.13.1.7 Editing Filters
Modifying a Condition in a Filter
1. Click the Display Filters icon on the Frame
Display window or select Apply/Modify
Display Filters… from the Filter menu to open the
Set Condition dialog box. The Set Condition dialog
box displays the current filter definition at the top of
the dialog. To display another filter, click the Open
icon, and select the filter from the pop-up list of all the saved filters.
2. Edit the desired parameter of the condition: Because the required fields for a condition statement
depend upon previously selected parameters, the Set Condition dialog box may display additional
fields that were not present in the original filter. In the event this occurs, continue to enter the
requested parameters in the fields provided until the condition statement is complete.
3. Click OK. The system displays the Save Named Condition dialog. Ensure that the filter name is
displayed in the text box at the top of the dialog, and click OK. If you choose to create an additional
filter, then provide a new name for the filter condition or accept the default name provided by the
system and click OK.) The Set Condition dialog box closes, and the system applies the modified
filter.
Note: When a display filter is applied, a description of the filter appears to the right of the
toolbar in the Frame Display windows.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
64 Frontline BPA low energy Hardware & Software User Manual
Set Condition “ [E] [:3 mmlywive Condition: FillerB whole (:1 Ewhde [ NOT Condition ] AND/DR where the protocol "B aseband" field ”LT_AD D H " ls E qum AND E] E] J < delete="" selecled="" condtion="" note:="" when="" a="" display="" filter="" is="" applied,="" a="" description="" of="" the="" filter="" appears="" to="" the="" right="" of="" the="" toolbar="" in="" the="" frame="" display="" windows.="" wei="">
Deleting a Condition in a Filter
If a display filter has two or more conditions you can delete conditions. If there is only one condition set in the
filter you must delete the filter using Delete Display Filters… from the Filters menu.
1. Click the Display Filters icon on the Frame Display window or select Apply/Modify
Display Filters… from the Filter menu to open the Set Condition dialog box. Click on the
Advanced button to show the condition in Boolean format. The dialog box displays the current filter
definition. To display another filter, click the Open icon, and select the filter from the pop-up list
of all the saved filters.
Figure 4.20 - Set Condition Dialog in Advanced View
2. Select the desired condition from the filter definition.
3. Click the Delete Selected Line icon.
4. Edit the Boolean operators and parentheses as needed.
5. Click OK. The system displays the Save Named Condition dialog. Ensure that the filter name is
displayed in the text box at the top of the dialog, and click OK. (If you choose to create an additional
filter, then provide a new name for the filter condition or accept the default name provided by the
system and click OK.) The Set Condition dialog box closes, and the system applies the modified
filter.
Note: When a display filter is applied, a description of the filter appears to the right of the
toolbar in the Frame Display windows.
Renaming a Display Filter
1. Select Rename Display Filters… from the Filter menu in the Frame Display window to
open the Rename Filter dialog. The system displays the Rename Filter dialog with a list of all user
defined filters in the Filters combo box.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 65
imam-um ”mmw-u um-umvas mam m [E Note: Connection Filters are not persistent across sessions.
Figure 4.21 - Rename Filters Dialog
2. Select the filter to be renamed from the combo box.
3. Enter a new name for the filter in the New Name box. Optionally click the Apply button and the new
name will appear in the Filters combo box and the New Name box will empty. This option allows
you to rename several filters without closing the Rename Filter dialog each time.
4. Click OK. The Rename Filter dialog box closes and the system renames the filter.
4.3.1.13.2 Connection Filtering
Connection Filtering allows the user to view a subset of the total available packets within the Frame Display.
The subset can include data from a single Bluetooth connection, or all of the BR/EDR packets, all of the low
energy packets, all of the 802.11 packets, or all of the HCI packets.
Bluetooth Applicability
A connection (device pair) is identified by
1. A Link for Classic Bluetooth,
2. An Access Address for Bluetooth low energy.
The link ID is a number that the ComProbe software assigns to identify a pair of devices in a BR/EDR
connection. In the Frame Display details pane, the Baseband layer contains the link ID field if the field’s
value is not 0.
An Access Address is contained in every Bluetooth low energy packet. The Access Address identifies a
connection between a slave and a master or an advertising packet.
Connection filtering displays only the frames, protocols, summary, details, and events for the selected
connections.
Note: Connection Filters are not persistent across sessions.
4.3.1.13.2.1 Creating a Connection Filter
In the Frame Display there are four ways to create a connection filter.
From the Frame Display Filter menu
Click on the Frame Display Filter menu Connection Filter selection. From the drop down menu, select
Classic or Bluetooth low energy. The options are
lClassic Bluetooth:
oAll will filter in all Classic Bluetooth frames. You are in effect filtering out any Bluetooth low energy
frames and are selecting to filter in all the Classic Bluetooth links.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
66 Frontline BPA low energy Hardware & Software User Manual
o rm.“ mmrnfimmmm Egg m. m m rum LN. Rn Bunkmalk Oplizm mm Hg.) .K . a; a , 0ifi03 ”m” p‘flMDDILJ‘ 51H Mam [MaslevlLeniES A W m, “m" . . “mm DZ" why nooemm mm» saubam Packelsldm an = “PM "5-- ; amend Hide/Sim mm filters ”5' mmml HemevLemAh n Rm“ “PM may" HemevVeman 3 M w Rn nnR r n r mam . :"r‘M n man an m 7 Cannxfnm Flier t Clak All I M m m 5532 SS“ 5:;"3523 [217nm em Blmnmh Iouamlgy link . I) n] 5532553 mack nxum‘mcu “55 3 W 5532 57“ Paazxsxam EH: Eum HI] 5955 8“ DEED W 5532 SSH mjw .39 5,657 56 EIflEIEI D W 5532 592 rvpg 2m em as unnnnnn ma/zmamaaazsau PavhadDa‘a Rate 3 Mhux me n unnnnnn ma/zma m 55327nv 9 km D'sphercifileSlmm-udn Elm m. {Jul Vina Fumul rm fihu Buuhnalk Oplmm Mm Hclp 03‘ rymsm w a m. Baxehand a Baxehand Heads ngm u (Ink » All “mom \memlgy .ma pncunmumms Smi-Scn‘ ,MWM Headansm 3 a m 6 mama P1 was Assam Add [RE am Ham Dena v Twreslamv ma/zmamas 32 ssv
oLinks displays all the master-slave links. You can select only one link to filter in. The selected link will
filter in only the frames associated with that link.
lBluetooth low energy:
oAll will filter in all Bluetooth low energy frames. You are in effect filtering out any Classic Bluetooth
frames and are selecting to filter in all Bluetooth low energy access addresses.
oAccess Addresses displays all the low energy slave device's access address. You can select only one
access address to filter. The selected link will filter in only the frames associated with that access
address.
l802.11:
oAll will filter in all 802.11 frames. You are in effect filtering out any other technology frames.
lHCI:
oAll will filter in all HCI frames. You are in effect filtering out any other technology frames.
Figure 4.22 - Connection Filter from the Frame Display Menu
From the Frame Display toolbar
Right-click anywhere in the toolbar and select Connection Filter from the pop-up menu. The procedure for
creating a connection filter are identical as described in From the Frame Display Filter menu, above.
Figure 4.23 - Connection Filter from the Frame Display Toolbar right-click
From the Frame Display panes
Right-click anywhere in a Frame Display pane and select Connection Filter in the pop-up menu. The
procedure for creating a connection filter are identical as described in From the Frame Display Filter menu,
above.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 67
o ham: 5.5555, 7555.55555mmm gag m m m .5. mm Wm M, 55., o 3 El "WEI wwgmmwmm : Ingmmooemw 5 555553 55525555 5555535555; 5555555555 mum 55.55.51 6 555555555 553555.555 55555555555555.5555} Stu/55m 5 555555. 5555 55 HeidaVawm} 9 5555555 55 555533555 5555 5555555 r5555 5,553 5/ W555 555555 552555 pm 5,555 55 Cary klx‘innmclipboa/d 5‘55 ‘7 5,555 55 32154 [nave Flam: 5,557 55 ./ [wand Node P5555 5,555 55 5,553 5/ 05555.55: 5" Mada 5,575 55 5/ Expand Ml Nudes 5,575 253 5 7 05555.45." 555. > c5315 2 MI 5 355555555 by :Mlqy 2 link 5 5.55155 mp 55.515 5555555555..“ 55253.. Dianna: m: "(5 p.555: 5555 55mm Yam 5 —’7 55555 5555555 5555555 5555555 5555555 5555555 5555555 5555555 5555555 5555555 5555555 5555555 ESLlI ' fl}? 9““ 55553555» 5/53/2555 555532 5555 5/53/2555 555532 555 5/53/2555 555532 5755 5/5 3/2555 5555 32 555 5/53/2555 555532 532 5/53/2555 555532 535 5/53/2555 555532 7555 5/53/2555 555532 755 5/53/2555 555532 7555 5/53/2555 555532 7555 5/53/2555 555532 7555 5/53/2555 555532 725
Figure 4.24 - Connection Filter from the Frame Display Pane right-click
From the Frame Display frame selection
Select a frame in the summary pane. Right-click and select Connection Filter in the pop-up menu. The
procedure for creating a connection filter are identical as described in From the Frame Display Filter menu,
above.
If the frame you have selected is associated with a Classic Bluetooth link or a Bluetooth low energy access
address, an additional pop-up menu item will appear as shown in the example image below. This selection is a
predetermined filter based on your selection. In the example, frame "6471" is associated with "Link 4", so the
predetermined filter assumes that you may want create a connection filter for that link. Clicking on
Connection Filter Link = 4 will filter in "Link 4" frames without opening all the drop-down menus.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
68 Frontline BPA low energy Hardware & Software User Manual
a rman ASEIl Hex Fram Della rmiamp : m Thls .5 the Summary Pane Copy sum tn Clipbolul 5m Selenium. Go “1.. ¢ Show Flame 5:: Column 1 Shaw rings-“y Comm. J Show Dds Column Add New Cotumn (Help) Remove New (olumn Change WM Order (Help) Rustin Def-uh Comm Md mum. Ewen» cm m: r on r AI comm-m m. m: 4 mm In may > m > leide um muss. Sn Suhsgquan M rum. sianiddm Pans . Note: The system currently limits the numberofframe displays to 5. This limit includes any Frame Displays opened using Duplicate View a from the Toolbar (see Working with Multigle Frame Disglays on age 47)
Figure 4.25 - Connection Filter from frame selection right-click
Creating from any Frame Display window
A Connection Filter can be created from any open Frame Display window, and the filtering will always be
applied to the original captured data set.
4.3.1.13.2.2 Connection Filter Display
Once you have selected which connections to filter in, another Frame Display will open. The original Frame
Display will remain open, and can be minimized.
Note: The system currently limits the number of frame displays to 5. This limit includes
any Frame Displays opened using Duplicate View from the Toolbar (see Working
with Multiple Frame Displays on page 47)
The new Frame Display with the filtered connection frames will only contain the data defined by the filter
criteria. That is, the criteria could be a single link or data for a particular technology.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 69
9mmWmustn‘tUmrumtsugusmmmfizm ‘= E K ‘ W, W, W W, m, WWW WWW WW WW, 0 EU” I. Y‘l SEMI IDILA‘ EEK! OnglnalDakaSeI-no protocoltabs a?“ ’lma c'ioowm 'mflMSML-l WWW. u _Evmu[ WWW,” .1 ‘urulLiAm/‘Linnn‘LEulmP‘SIr ‘m ‘nn‘ mu firsfljhffifln 9 Fv-mlkdq m7». nJWWWAWWWmL wrunm my}; , Man's-mm mind. Era g Wmmmm‘ a, m w. m a... m cm: W m 5L1. gmm‘k‘fillm‘ 0 m9 IMY‘I $2M Imp Mia-1W hm W9 A r, r n. mpg“ Inca «PW-«.00 m WRRQWMW WWWWWWWWW; mam—1;; 153'" F ltered Data Set - note protocol tabs mum's my W‘— F “W mam :7 2mm x m. mm W Fum n... hm ~ EWCA‘EZESLWW ""‘”‘“‘"‘”"“‘"WW‘W —IIIII—E MWWWW §$j;:$‘;f‘"‘m“m 2 W mnnmu mmmwm W,,,.W.W.m WSWWW, 3 W WWW.) WWW“ WWW m h . W WWW.) WWWWWW 49mm m5: "‘ 3’ 5 W mnnmu vzvzmsmlnmm mum ' mm“... s an mnnmu ‘m/zmsmumssu WWW, WWWHM 7 W WWW.) WWWWW WWW, (WWW, , W WWW.) WWWWWS WWW, ,W s W WWW.) WWWWWW “km-‘9'!” PDUVWADVJND m as mnnmu ‘m/zmsmumm :Anamm‘ mum-Annmdyp-mmm , u m mnnmu vyvzmsmlnmsm mlmm WWW“, W W WWW.) WWWWWW WWW-mm H W WWW.) WWWWWJ Wynn W W WWW.) WWWWWW 'ADE‘W" ‘5 as mnnmu ‘m/zmsmumm‘ W9“ ‘5 a mnnmu szmsmlnmmm Fgggnw w W mnnmu mmmwm W, W W WWW.) WWWWWW “Whammy“ w W mnnmu ‘m/zmsmlnmmn WWW, W W WWW.) WWWWWW W.“ W W WWW.) WWWWWW WWWW 22 W WWW.) WWWWW WW, W W WWW.) vyvzmsmlnmm WWWWWWW W W WWW.) WWWWWW WWWWW W W WWW.) WWWWW WMWWMWW , W W WWW.) WWW”, WWW. W W WWW, WWW,“ WWWWW W W WWW, WWWWWWW WWW ~ W W WWW, WWWWWM my.“ my mam“: Em] mum mm
Display Example 1: Bluetooth low energy Access Address selected
Figure 4.26 - Front Display: Filtered on Access Address 0x8e89bed6
In the figure above is an example Bluetooth low energy data set connection filtered on Access Address =
0x8e89bed6. The Frame Display in the front is the filtered data set. One way to note the difference between
the original and the filtered display is to observe the Protocol Tabs. In the filtered display there are four low
energy protocol tabs as compared to nine in the original display. This access address connection is not using
five of the protocols.
From any open Frame display the user can set another Connection Filter based on the original data set.
Display Example 2: All 802.11 data filtered in
In this example, there is a capture file with Classic Bluetooth,Bluetooth low energy, and 802.11. To view just
the 802.11 data set, 802.11 = All is selected from the right-click pop up menu.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
70 Frontline BPA low energy Hardware & Software User Manual
u a.“ DEM-y , mAnufirHunW. fikmmmnmmommmdep a r , 03‘PM‘Y‘MQpflIflqu fill. mm W33 m . gm, IDEIEEIMI3000\ m, In...“ E 'WWWWW ammmlmr \Flflnnecuunmflaluzxuulhms|lZEAHAMrmnaau|sDr lunmm 1 Davy 5‘»an m mum: “MC-W” '"M E r maumrmmvl 5"“ al‘ mmmwmm ‘ ' Huh-l 4 Walkman: 5 mm Asm m, M um mm» A E mlavsemvrms ‘ 53 mmmzsmasw U ./ “mum ; 23 mum mmmzmsasnxnn 23 nnunmn mu/zmzasasasnxnn WWW file! ' Chm ' 2: an un mu mu/zmz 3 54 59 sum , “mummy, > 23 nnunmn mu/Znuzsasasnxnn Suawkmapmm” mm ,‘ A" a: mnnnn7 mmmzaasaansm 22 nnunmn mu/zmzzsdsxsnsan WNW"! s 33 nnunmn mmmzwsxamsx s 33 nnunm‘ mmmzmsxsms ffflfd’jhm ' l m 33 nnnnmn mn/zmzzsasxazsss grumghwhrvnnumzurrmm: ‘w ‘= >1< m:="" m="" m="" mm="" m="" 3mm="" um;="" mm,="" m="" oipii="" y‘sznimu="" i$l1i0="" £33m“:="" .dengooq="" “"="" '="" 3,?meva="" mm="" aammmmmmmnmmhmx="" "mm="" m,="" uml="" hus="" emmy-nun?="" \mnmmum»ms\ilmlnmms‘umrumrnanqu‘snfi="" lnazxmp="" 1="" ,w‘="" ‘="" 7h="" ‘="" h="" nmnmmdlnml="" 977="" m‘="" a"mmrmmmflm="" “"‘l‘mll‘ml="" _,_m_="" mwm="" m="" \="" mammalian!"="" mm="" film="" inn-l="" chum”,="" um..m.,mn-mm...,mum="" -="" b="" n="" _="" ‘m="" m="" v...="" «mm="" m,="" mm="" up...="" wm="" m,="" \oflfi'l="" y‘igzl‘i-eiilj‘!="" eli.="" hm="" www="" deer‘dooq="" n...="" .="" my:="" n="" a="" d="" m»="" l="" _wu="" imq=""> an immmmwmm ' uni-4 F x mm m m pm a... mm - , vssn m9 mum mmzmzmmma ‘
Figure 4.27 - Unfiltered: Capture File with Classic, low energy, and 802.11
When the Frame Display with the filtered 802.11 data set appears, only the Protocol Tabs for 802.11 are
present and the tabs for Classic Bluetooth and Bluetooth low energy have been filtered out.
Figure 4.28 - Connection Filter selecting All 802.11 frames, front
4.3.1.13.3 Protocol Filtering from the Frame Display
4.3.1.13.3.1 Quick Filtering on a Protocol Layer
On the Frame Display , click the Quick Filtering icon or select Quick Filtering from the Filter
menu.
This opens a dialog that lists all the protocols discovered so far. The protocols displayed change depending on
the data received.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 71
| FiMeIB | {IA-a rm"; .u um; um mm Tn Nu m ank u Hm: Nmad may: mummwmzm mummmdm mummwwmm mummmmmm "AVDVP Hnuz Usm w Snupmbd mm mm: S‘aw [mm m m away M mm Mum and mm Fllar‘gximmnrlyhm: humantheummmnammmnhwxmemnham: um mm. W mum Wm M dm‘wng m w m. N amsd Flats E] Fume E] Fillzn E] Filtzlz [15m Iin - Supported [1 Rule: Slave DCnnligued BT law enevgy devi: D Exclude NULL: and PULL:
Figure 4.29 - Frame Display Quick Filtering and Hiding Protocols Dialog
The box on the left is Protocols To Filter In. When you select the checkbox for a protocol in the Protocols
to Filter In, the Summary pane will only display those frames that contain data from that protocol.
If you filter on more than one protocol, the result are all frames that contain at least one
of those protocols. For example, if you filter on IP and IPX NetBIOS, you receive all frames
that contain either IP or IPX NetBIOS (or both). A Quick Filter tab then appears on the
Frame Display. Changing the filter definition on the Quick Filter dialog changes the filter applied on the
Quick Filter tab. Quick filters are persistent during the session, but are discarded when the session is closed.
The box in the center is the Protocols To Hide. When you select the checkbox for a protocol in the
Protocols To Hide, data for that protocol will not appear in the Decode,Binary,Radix, and Character
panes. The frames containing that type data will still appear in the Summary pane, but not in the Decode,
Binary,Radix, and Character panes.
The box on the right is the Named Filters. It contains filters that you
create using the and dialogs. When you select the checkbox for the
Name Filters, a tab appears on the Summary Pane that displays the
frame containing the specific data identified in the filter. The named
Filter tab remains on the Frame Display Summary Pane
unless you hide it using the dialog.
With low energy, the Configured BT Low energy devices
and Exclude NULLS and POLLs are default named filters.
Check the small box next to the name of each protocol you want to filter
in, hide, or Named Filter to display.
Then click OK
4.3.1.13.3.2 Easy Protocol Filtering
There are two types of easy protocol filtering. The first method lets you filter on the protocol shown in the
Summary pane, and the second lets you filter on any protocol discovered on the network so far.
Filtering on the Summary Layer Protocol
To filter on the protocol in the Summary in the Frame Display window pane:
1. Select the tab of the desired protocol, or open the Summary combo box.
2. Select the desired protocol.
3. To filter on a different layer, just select another tab, or change the layer selection in the combo box.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
72 Frontline BPA low energy Hardware & Software User Manual
aym I Errol: [ Note: When you have multiple Frame Display windows open and you are capturing data, you may receive an error message declaring that "Filtering cannot be done while receiving data this fast." If this occurs, you may have to stop filtering until the data is captured. Mllummlwemmfimlme k smwmmmwm z E z ram ~ m 0000 'a *lt- M119— Avmvmrmm “ M flvcr'mz Assam m, AveiuPavlnaflmmwm a van» mum”: I WSW ”mammary _ m fivwww 5 Wm flamm- mmw. 7:. ,imew: D WW,” u unughlhoyvl l sammyymnmngwm n n . m I Miami :1 lnwwlls “imam, ”m m rummage 5 WM :1 5mm wmw-i-v m i ‘ . mm" as WWW mmamqmm I": ii, if mummy i a 1‘ 3‘ mum For Help m n
Filtering on all Frames with Errors
To filter on all frames with errors:
1. Open the Frame Display window.
2. Click the starred Quick Filter icon or select Quick Filtering from the Filter menu
3. Check the box for All Frames With Errors in the Protocols To Filter In pane, and click OK.
4. The system creates a tab on the Frame Display labeled "Errors" that displays the
results of the All Frames With Errors filter.
Note: When you have multiple Frame Display windows open and you are capturing data,
you may receive an error message declaring that "Filtering cannot be done while receiving
data this fast." If this occurs, you may have to stop filtering until the data is captured.
4.3.2 low energy Timeline
The Bluetooth low energy Timeline displays packet information with an emphasis on temporal
information and payload throughput. The timeline also provides selected information from Frame Display.
The timeline provides a rich set of diverse information about low energy packets, both individually and as a
range. Information is conveyed using text, color, packet size, and position.
Figure 4.30 - Bluetooth low energy Timeline
You access the Timeline by selecting Bluetooth low energy Timeline from the View menu or by pressing
the Bluetooth low energy Timeline icon on the Control window toolbar and Frame Display toolbar.
In computing throughput, packets that have a CRC error are excluded.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 73
4.3.2.1 low energy Timeline Toolbar
The toolbar contains the following:
Icon Description
Lock - The Lock button only appears in live mode and is automatically depressed when the
user scrolls.
Unlock
First Packet
Previous Packet
Next Packet
Last Packet
Previous Interframe Spacing (IFS) Error
lInterframe Spacing is considered valid if it is within 150 μs + or – 2us
lIf the Interframe Spacing is less than 148 us or greater than 152 us but less than or equal to 300
μs, it is considered an IFS error.
Next Interframe Spacing (IFS) Error
lInterframe Spacing is considered valid if it is within 150 μs + or – 2us
lIf the Interframe Spacing is less than 148 us or greater than 152 μs but less than or equal to 300
us, it is considered an IFS error.
Previous Error Packet
Next Error Packet
Zoom In
Zoom Out
Reset - The Reset button appears only in live mode. Reset causes all packet data up to that
point to be deleted from the Packet Timeline display. This does not affect the data in Frame
Display. Resetting the display may be useful when the most recent throughput values are of
interest.
Table 4.3 - Bluetooth low energy Timeline Toolbar
4.3.2.2 low energy Timeline Menu Bar
The Bluetooth low energy Timeline menu bar contains the following:
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
74 Frontline BPA low energy Hardware & Software User Manual
Show Devxce Address Rows Show Radxo Rows
Menu Selection Description
File Reset Resets Timeline to display beginning at current
frame. Available only in Live mode.
Exit Closes the timeline window
Format Show Device Address Rows Displays rows of packets from sending devices.
The source device address will appear on the
left of each row.
Show Radio Rows Displays rows packets received on radios 0,1,
or 2. The radio number will appear on the left of
each row.
Table 4.4 - Bluetooth low energy Timeline Menus
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 75
Single Segment Zoom Multiple Segment Zoom
Menu Selection Description
Zoom Zoom In Displays less of the timeline, but in greater detail.
Keyboard Shortcut: (Ctrl +)
Zoom Out Displays more of the timeline, in less detail.
Keyboard Shortcut: (Ctrl -)
Zoom In Tool Displays a magnifying glass icon with
a + and an arrow that allows for precise
positioning on the timeline. Clicking
will show less of the timeline around
the point where the tools is clicked.
Zoom Out Tool Similar to the Zoom In Tool except with a "-"
sign in the magnifying glass, and clicking will
show more of the timeline around the point
where the tool is clicked.
Selection Tool
Single Segment Zoom: Each selection defines the time displayed, "1" segment, and number
of 1.25 ms markers withing the segment.
2.5 ms (1x2) Displays one 2.5 ms segment with 2 markers.
11.25 ms (1x9) Displays one 11.25 ms segment with 9 markers.
33.75 ms (1x27) Displays one 33.75 ms segment with 27
markers.
125 ms (1x100) Displays one 125 ms segment with 100
markers.
437.5 ms (1x350) Displays one 437.5 ms segment with 350
markers.
1.875 s (1x1500) Displays one 1.875 s segment with 1500
markers.
3.75 s (1x3000) Displays one 3.75 ms segment with 3000
markers.
Multiple Segment Zoom: Each selection defines the timeline view port, the number of
segments, and number of 1.25 ms markers withing the segment. For example, selecting
"7.5 ms (6 1.25 ms time intervals (3x2))" will display "7.5 ms" of the total timeline in "3"
segments of with "2" markers per segment for a total of "6" markers.
7.5 ms (6 1.25 ms time intervals (3x2)) 3 segments, 2 markers per segment: 1.25 ms x
6 = 7.5 ms total; 1.25 ms x 2 = 2.5 ms per
segment.
22.5 ms (18 1.25 ms time intervals (6x3)) 6 segment, 3 markers per segment
90 ms (72 1.25 ms time intervals (12x6)) 12 segments, 6 markers per segment
202.5 ms (162 1.25 ms time intervals
(18x9))
18 segments, 9 markers per segment
360 ms (288 1.25 ms time intervals
(24x12))
24 segments, 12 markers per segment
Table 4.4 - Bluetooth low energy Timeline Menus (continued)
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
76 Frontline BPA low energy Hardware & Software User Manual
Menu Selection Description
562.5 ms (450 1.25 ms time intervals
(30x15))
30 segments, 15 markers per segment
810 ms (648 1.25 ms time intervals
(36x18))
36 segments, 18 markers per segment
1.1025 s (882 1.25 ms time intervals
(42x21))
30 segments, 15 markers per segment
1.44 s (1152 1.25 ms time intervals
(48x24))
48 segments, 24 markers per segment
1.8225 s (1458 1.25 ms time intervals
(54x27))
45 segments, 27 markers per segment
2.25 s (1800 1.25 ms time intervals
(60x30))
60 segments, 30 markers per segment
2.7225 s (2178 1.25 ms time intervals
(66x33))
66 segments, 33 markers per segment
3.24 s (2592 1.25 ms time intervals
(72x36))
72 segments, 36 markers per segment
3.8025 s (30421.25 ms time intervals
(78x39))
78 segments, 39 markers per segment
4.41 s (3528 1.25 ms time intervals
(84x42))
84 segments, 42 markers per segment
5.0625 s (4050 1.25 ms time intervals
(90x45))
90 segments, 45 markers per segment
Table 4.4 - Bluetooth low energy Timeline Menus (continued)
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 77
Menu Selection Description
Navigate First Packet Goes to the first packet.
Keyboard Shortcut: Home
Last Packet Goes to the last packet.
Keyboard Shortcut: End
Previous Packet Goes to the packet prior to the currently selected
packet.
Keyboard Shortcut: Left Arrow
Next Packet Goes to the next packet after the currently
selected packet.
Keyboard Shortcut: Right Arrow
Previous Invalid IFS Packet. Goes to the previous invalid IFS packet from the
currently selected packet. If there is no previous
invalid IFS packet this item is not active.
Next Invalid IFS Packet Goes to the next invalid IFS packet from the
currently selected packet. If there are no invalid
IFS packets following the current selection, this
item is not active.
Previous Error Packet Goes to the first error packet prior to the current
selection. If there are no error packets available,
this item is not active.
Keyboard Shortcut: Ctrl+Left Arrow
Next Error Packet Goes to the first error packet following the current
selection. If there are no error packets available,
this item is not active.
Keyboard Shortcut: Ctrl+Right Arrow
Selected Packet Keyboard Shortcut: Enter
Toggle Display Lock Available only in Live mode.
To prevent timeline scrolling during capture, click
on this time and the display will lock in its current
position. Capture will continue but the displays will
remain static.
To resume scrolling during capture, click again on
this menu item.
Help Help Topics Displays Bluetooth low energy Timeline help
topics.
Table 4.4 - Bluetooth low energy Timeline Menus (continued)
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
78 Frontline BPA low energy Hardware & Software User Manual
luau-«mm 09m End-1mm ucncam “"9”" a mum E L." {all} n m” ‘5 - nan mm. C] W Um“ ER mm Average Packet Thoughput 559 I1 54 EitsJSel: 1 Second Packet Ihmut 5,720 Bits/SEE Wh = peak = 559,164 Note: 1-second throughput behaves differently than average throughput. In particular, while average throughput can be very large with only a couple of packets (since it‘s dividing small packet or payload size by small time), 1-second throughput can be very small since it divides by an entire one second.
4.3.2.3 low energy Timeline Legend
This legend identifies the color coding found in the timeline.
lWhen you select a packet in the timeline, items in the legend that
relate to the packet are highlighted.
lBold text indicates that the type of packet has been seen in the
timeline.
4.3.2.4 Throughput Displays
Throughput is payload over time. There are 3 categories of throughput:
4.3.2.5 Average and 1 Second Packet Throughput
The figure depicts the Average and 1 Second Packet
Throughput displays. This display appears when you select the
Packet Throughput radio button.
lAverage Packet Throughput is the total packet size over the entire session divided by the total
time. Total time is calculated by taking the difference in timestamps between the first and last packet.
l1-Second Packet Throughput is the total packet size over the most recent one second.
lWidth = peak =: This displays the maximum throughput seen so far.
lA horizontal bar indicates percentage of max seen up to that point, and text gives the actual
throughput.
4.3.2.6 Average and 1 Second Payload Throughput
The figure depicts the Average and One Second Payload Throughput display. This display appears
when you select the Payload Throughput radio button.
lAverage Payload Throughput is the total payload over the entire session divided by the total time.
l1-second Payload Throughput is the total payload over the most recent one second.
lWidth = peak =: This displays the maximum throughput seen so far.
Note: 1-second throughput behaves differently than average throughput. In particular,
while average throughput can be very large with only a couple of packets (since it’s
dividing small packet or payload size by small time), 1-second throughput can be very
small since it divides by an entire one second.
4.3.2.7 Throughput Graph
The following figure depicts the Throughput Graph.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 79
w: Average and Average and 1 Second Packet Throughpu Average and Average and 1 Second Payload Throughgut AVEBEE Paylflsd WWW“ Avalage Payluad Thluugw 5H lids ml: l 5&2an Psylusd Thmughvm 1 Sam Paylaad lmvglwz LEI nus um Mala wm=pn=lm madam Wllh MIC ml selecled payload .s 1360 bllslsec wnn MIC selecled payload .s 1340 bllslsec Flaws lzan Len=28 Em 5W ka3 mam Wm thlvul I: mm m: . and mm leul . Al Dun: w Smw RummAvua]: In [a LE as m Dual 3 LE P” LE as l LE m Pleavlhle Ma 7 Acme/dam axsusssszl B Fm, ER: nxllcnsa Ei LE DATA "272 LLlL Slat "273 NW n m SN l ma MU u ‘27:; Frans IZW ems palealwll la m / Emmet, me W LE Enclwle:Payhad[laAa uxlauamsems ms / Enewple: Ml: UanchkS‘ Paylmd l hagmcmcd oceaac a llwalmflvcl)
Figure 4.31 - Bluetooth low energy Timeline Throughput Graph
The Swap button switches the position of the Timeline and the Throughput graph.
Selecting Throughput Display
lSelecting Packet Throughput displays just the Packet Throughput in graph form and displays the
Average and Average and 1 Second Packet Throughput on the left side of the dialog. The y-axis
numbers appear in blue.
lSelecting Payload Throughput displays just the Payload Throughput in graph form and displays
the Average and Average and 1 Second Payload Throughput on the left side of the dialog.. The y-axis
numbers appear in green.
lSelecting Include MIC will include the transmitted 32 bit Message Integrity Check data in the
throughput.
You may want to include Message Integrity Checks in your throughput even though MIC is not application
data. MICs are transmitted and you may want to included in the throughput as a measure of how active
your radio was.
In this example the 1 Second
Payload Throughput is 1,360
bits/sec when Include MIC is
not checked. By checking the
Include MIC box the MIC data is
included in the throughput data
and 1 Second Payload
Throughput increases to 1,840
bits/sec. This capture file has 15
MICs in the last second of the file.
A MIC is 32 bits for a total of 32
bits X 15 MICs = 480 bits.
The easiest way to view MIC
data is to use the Frame
Display.
1. Using the Decoder
pane scroll through the
frames until LE Data
shows "Encrypted
MIC".
2. Place the cursor on the
Encrypted MIC data
and while holding the
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
80 Frontline BPA low energy Hardware & Software User Manual
35"“ unaluru LEADVILEDA'A‘LELL‘LW‘SIP‘ Fveambb 0x55 — Access/waves: uxansssazw s new Freq .Emwad Mum; Mn? 3 ngiummsa ‘27! nxeuzsame \ EncryptedMlC ’ MD a“ ‘272 DxSle‘Srcd columusaddedln NESN n ‘27: meSummaryPane. 5N ‘ ‘27: ML 0 ‘27s umauza Pa Dad LGgm V3 V275 UXSCESUW' Emwean :dDaL: [IASZJSLMnE V277 ‘27:; E w w» m w 279 uxabazmz \\ wzan UxaficMam A \— 31 Use yoummusemarzgms :3 fiemmmesunmamee 8‘ Emmmmmgyhmdwr'k suiflrLan-eflmm \c: e1 )1: \ W mm. Mm NM» w" 000 " {- 9‘ 4' :; QJL Awwmnmm mush-w- ‘ w 1 mmwarmm 41m mwmm lumm .31 ac x m m , mmmmm m mm, "115.17 W W 3 mm: D M " ‘s-cmanuaammwm - Baum manna-mm rm. nmn mum-aw mm— mum; mum Mmmvnsamsmm my mm , mm mmmmmzAmflw-A [wwwawx/JND m :1 m :7 Hammad Dams M um“ m w Rumngmuag- “mum-.7 mmunuuz-mm-m Wmu‘ cmnrumlm rwwmn
left mouse button drag the field to the Summary pane.
3. An Encrypted MIC column is added to the Summary pane.
Figure 4.32 - Creating Encrypted MIC in Frame Display Summary pane
4.3.2.8 The Timeline
The low energy Timeline shows Bluetooth packets within a specific period of time. Time is shown as one or
more contiguous segments. Within each segment are one or more source access address or radio rows.
Figure 4.33 - Bluetoothlow energy Timeline
4.3.2.9 How Packets Are Displayed
Bluetooth low energy packets are displayed in the low energy timeline in Segments and Rows.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 81
fimlme m... nmm , sea a n “manna Seams,“ Enddwnerlhmefimv l'lmliim Rm llmoilno Rm llmellne Ram ) Ema-mus Hummus mmmmw mum llmellne Rmrl l'lmliim Rm llmoilno Rows > Enddupln 5.9m.) hqgmmgdugmcl he‘uw rumin- Rom umeune Rm Emeline Rm 1mm Emma nmmn
lSegments are "pieces" of the timeline. You can zoom in to show just one segment, or you can zoom
out to show multiple segments. In multiple segment displays the segments are contiguous from top to
bottom. Refer to the diagram below. The top-most segment contains the beginning timestamp on the
left. The timeline proceeds from left to right in a segment, and continues in the next segment down
beginning on the left of that segment. If you zoom out to show two segments the viewable timeline
appears in those two segments. You will use the scroll bar on the right to scroll through the timeline.
In a one-segment display the viewable timeline appears in that one segment. You will scroll through
the timeline using the scroll bar appearing at the bottom of the timeline display.
lRows show either the access address of the configured devices or of all discovered devices. Because
the segments are contiguous in multiple segment displays, the rows in each segment are identical.
In the following diagram we see a three segment display showing the timeline flow.
Figure 4.34 - Diagram of low energy Timeline Flow with Segment and Row Relationship
lRows can display either source device access addresses or the three radios receiving the data..You choose
with methods by selecting Show Device Address Rows or Show Radio Rows from the Format
menu.
Show Device Address Rows will display rows of
packets from sending devices. The source device address
will appear on the left of each row.
Show Radio Rows will display rows packets received
on radios 0,1, or 2. The radio number will appear on the
left of each row.
oThe Addr rows display packets sent by that access address for all devices or configured devices. You
select All Devices or Configured Devices using the radio buttons.The address shown is the access
address for the device.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
82 Frontline BPA low energy Hardware & Software User Manual
Radio Addr SelededPadm:57.120 MvapezADVJD TIMMHD'E Sampson: 30,957 Aanype:SCAN_REQ mummy: 311412013121. ‘ 527 us 326 us 2 _ j 15-1 us 150 MS
Figure 4.35 - Device Address Rows
oThe Radio rows display packets received by that radio (0, 1, or 2).
Figure 4.36 - Radio Rows
lThe mouse wheel scrolls the timeline horizontally when displaying a single segment, and scrolls vertically
when displaying multiple segments
lYou can also zoom by using the right-click menu (which displays magnification values), using the + and -
Zoom buttons on the toolbar, or by selecting a value from the Zoom menu.
lPacket length indicates duration
lThe Timeline and Frame Display are synchronized so the packet range selected by the user in one is
automatically selected in the other. For the selected packet range, the Timeline shows various duration
values (Gap,Timestamp Delta, and Span), but only if both the first and last packet in the range are
available in the Timeline. If not, those values are shown as “n/a”. Packets that are not displayed in the
Timeline are Sniffer Debug packets, non-LE packets (e.g. WiFi), and packets that are not from a
Configured Device the Configured Devices radio button is checked.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 83
Add! nun-arm 9 mm hemmv‘m‘mrermjynkmwm m: mm mm mm ma 0900‘ ‘A M‘- fink Amen-PMVW awmwm WWW mmwmuuuw. ‘ Summon mm ““- Asm» WM; MAN” I // .4:sz- Mismm—lruny—Snusr / mm Immunvlnmmm A 337‘ ‘3“ as. m M‘wnm mm,“ b. m-‘wmnn v. a“ nwms ‘ MSW R-uvdwlmnnm synchmmzedwm m m L-mm as \ mm mm mm Mmm mam mm m mumzm WM hmvw—Smusrpm u m ofiflfinY‘leZM‘V '\ filam- tzfimw Inca comm ~mxwmvlw [v32 ,4 layman,“ hwnmfiww" m1 (“Magnum “my; Aw‘IEDA \Liu‘lmnsup my \ mmwmmmmm.“ Mann-.7." x Emumwmmm s m. than M. m mm m m w m m ”Km“. m w Il-mzmzmz 3, 52 m... “WWW“ :22 :2: :‘mi: 3 3:: ”35”“ m M mm M wmrzrzrzvz v2 27 nnn 755.5 2: m "s Nilkcrsluwedloulld «remnant mamm pnillwilmlkrmilhs Hammad: 125m;
Figure 4.37 - low energy Timeline and Frame Display Packet Synchronization
4.3.2.10 low energy Timeline Visual Elements
The low energy Timeline consists of the following visual elements:
lTime Markers - Time markers indicated by vertical blue lines are shown at 1.25 ms intervals. The markers
are provided to help visualize the timescale and are also useful when using dual-mode chips that do
BR/EDR and LE at the same time. Time markers snap to the beginning of the first data packet by default,
but they can be snapped to the beginning or end of any packet by right-clicking on a packet and selecting
Align Time Marker to Beginning of Packet or Align Time Marker to End of Packet. All other
markers will shift relative to that new reference point.
Figure 4.38 - Timeline Markers Shown Snapped to End of Packet
lTimestamp - The beginning and ending timestamp for each segment is displayed beneath each segment.
When showing multiple segments the beginning timestamp is the same as the ending timestamp of the
previous segment.
In addition to the timestamps the segment information bar shows the zoom value in the center of the bar.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
84 Frontline BPA low energy Hardware & Software User Manual
Add! Note: The raw timestamp value is the number of 100-nanosecond intervals since (he beginning of January 1, 1601. This is standard Windows time. Mv Type ADV_ND Tmm:3l141201312:14:19.272227 PM Dumtinn: 376 us Channel‘ 39 - 2480 MHz _|Se|eded Packet 1.751 _S:I:m Plums 1.751 711753 Glnzl‘lsus Tlnestnlm Deu 352 us Sum 9601:: 52: us 32»: us Haw PM L Discontinuities low energy Timeline Legends
Figure 4.39 - Bluetooth le Timeline Segment Timestamp and Zoom Value
Note: The raw timestamp value is the number of 100-nanosecond intervals since the
beginning of January 1, 1601. This is standard Windows time.
lPacket Info Line - The packet info line appears just above the timeline and displays information for the
currently selected packet.
Figure 4.40 - Bluetooth le Timeline Packet Info Line
lWhen you select multiple packets, the info line includes:
oGap - duration between the end of the first selected packet and the beginning of the last selected
packet.
oTimestamp Delta - Duration between the beginnings of the first and last packets selected.
oSpan - Duration between the beginning of the first selected packet and the end of the last selected
packet
Figure 4.41 - Bluetooth le Timeline Packet Info Line for Multiple Selected Packets
lFloating Information Window (aka Tooltip) - The information window displays when the mouse cursor
hovers on a packet. It persists as long as the mouse cursor stays on the packet.
lDiscontinuities - Discontinuities are indicated by cross-hatched slots. See the Discontinuities section.
lPacket Status - Packet status is indicated by color codes. Refer to low energy Timeline Legends.
lRight-Click Menu. - The right-click menu provides zooming and time marker alignment.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 85
De Qickion Show HwiuAvelage J m nmmummm ‘0 I nun-u “milllljmflmmlm line, acket 0 acket o acket 0 Packet
lGraphical Packet Depiction - each packet within the visible range is graphically depicted. See the Packet
Depiction section.
lSwap Button - The Swap button switches the position of the Timeline and the Throughput
graph.
lShow Running Average - -Selecting this check box shows a running average in the Throughput Over Time
graph as an orange line .
4.3.2.11 low energy Packet Discontinuities
The following figure depicts a discontinuity between two packets.
Figure 4.42 - Bluetooth® low energy Packet Discontinuity
To keep the timeline and the throughput graph manageable, big jumps in the timestamp are not represented
linearly. Instead, they are shown as discontinuities. A discontinuity exists between a pair of packets when the
timestamp delta (the timestamp of the second packet minus the timestamp of the first packet) is (1) more
than 4.01 seconds or (2) is negative. The reason that the discontinuity trigger is set at 4.01 seconds is because
the maximum connection interval time is 4 seconds.
A discontinuity is indicated by a cross-hatched pattern drawn between two packets and a corresponding
vertical dashed line in the throughput graph. When the timestamp delta is greater than 4.01 seconds, the
discontinuity is a cosmetic convenience that avoids excessive empty space. When the timestamp delta is
negative, the discontinuity is necessary so that the packets can be drawn in the order that they occur.
4.3.2.12 low energy Timeline Navigating and Selecting Data
Buttons, menu items, and keystrokes can be used to go to the next or previous packet, next or previous
invalid interframe spacing (IFS), next or previous error packet, and the first or last packet.
lIf there is no selected packet in the timeline, First Packet ,Next Packet , and Last Packet
are enabled, but Previous Packet is not.
lA single packet is selected either by clicking on it, navigating to it, or selecting it in the Frame Display.
oSingle Segment Navigation:
nSelecting Previous Packet will select the next packet in time (moving back in time to the left)
regardless of which row it is on. If the previous packet is not in the display or if a portion of the
packet is visible, the display will scroll to the next packet and it will appear selected on the left of
the display. The timestamp will change with the scrolling of the display.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
86 Frontline BPA low energy Hardware & Software User Manual
nSelecting Next Packet will select the next packet in time (moving forward in time to the right). If
the next packet is not in the display, the display will scroll to the next packet and it will appear
selected on the right of the display. The timestamp will change with the scrolling of the display.
oMultiple Segment Navigation:
nSelecting Previous Packet will select the next packet moving back in time (to the left) on the
segment and will select the previous packet regardless of which or segment it is in.
If the selected packet overlaps with the previous segment, the display will show the packet
selected in both segments.
If the previous packet is not shown in the timeline display or a portion of the packet is
displayed,the display will move the view port back in time and will display the selected packet in
the top segment on the left edge. Each segment's timestamps will synchronously change as the
view port scrolls backwards in time.
nSelecting Next Packet will select the next packet moving forward in time (to the right)on the to the
next packet regardless of which row or segment it is in.
If the next packet overlaps on a following segment, the display will show the packet selected in
both segments.
If the next packet is not shown in the timeline display on any segment or a portion of the packet is
displayed, the display will move the view port forward in time and will display the selected packet
in the bottom segment on the right edge. Each segment's timestamps will synchronously change as
the view port scrolls forward in time. All subsequent selected next packets will appear on the right
of the bottom segment.
lMultiple packets are selected either by dragging the mouse or by holding down the shift key while
navigating or clicking.
lWhen a single packet is selected in the timeline it is also becomes selected in the Frame Display. When
multiple packets are selected in the timeline, only one of them is selected in the Frame Display.
lThe keyboard left arrow key goes to the previous packet. The right arrow key goes to the next packet.
The Ctrl-left arrow key goes to the previous error packet. The Ctrl-right arrow key goes to the next error
packet.
lThe mouse scroll wheel will scroll the timeline as long as the cursor is in the dialog.
4.3.2.13 low energy Timeline Zooming
Zoom features can be accessed from the Bluetooth low energy Timeline Zoom menu by right-clicking on
the Timeline window.
A couple of things to remember about Zooming.
lZooming using the toolbar buttons in a single segment display is relative to the center of the display. That is
as you zoom out those packets on the left and right halves will move closer to the center. If you zoom in,
those packets in the left and right halves will move towards the left and right edges respectively.
lZooming using the toolbar buttons in a multiple segment display is relative to the number of segments. If
you have a single display and zoom out they will become two segments, then three segments, then six,
and so forth.
lSelecting a Zoom icon (+ or -) on the toolbar zooms in our out.
lThe current Zoom setting is shown in the center of the timeline segment information bar at the bottom of
each timeline segment.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 87
Zoom In Zoom Out Zoom In Tool Zoom Out Tool Selection Tool Isl-sud) 11.25ms(1)9) Ctrl‘ Plus ChloMinus 33.75 ms (1x27) 115 ms (1x100) 1375 MS (1163)) 18755 M500) 3.755 (1m) 75 ms (615 msflneinlavlls (3112)) 22.5 ms (1315 msflneimuvlls (618)) N ms (72 1.5 mstime intelvals (1216» 52.5 ms (162 15 ms tin: intervals (1819)) 50 ms (21!! 1.5 mslim: imnvals (24112)) 562.5 ms (450 1.5 ms tin: intuvals (11115)) 310 ms (M8125 mslim: intnvals m8» 1.1025 s (882 1.25 mslime intuvals (42:21)) 1M 5 (1152 1.25 mslim: imavals (48:24)) 1.8225 s (1158 1.25 mslim: imavals (SleD) 2255 (1M125 Illslim: inuvals m» 2.725 s (2173 15 mslime imuvils (6683)) 32‘s (159215 mstim: imals (7m) 3M55 W215 mstim: intelvals (7389)) 1.41 s (3528 15 "Kim: inelvals Will» 5.065 s (4050 1.5 mstime intelvals (90145))
lIf you are in multiple segments the segment information bar will show the zoom level with the text "
(Contiguous time segment x/n)" where "x" is 1,2, 3... segment and "n" is the total number of segments. For
example: :"(Contiguous time segment 2/3)".
4.3.2.14 Zoom menu
Figure 4.43 - low energy Timeline Zoom menu
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
88 Frontline BPA low energy Hardware & Software User Manual
Timelineview Markers per displayed segment 25 ms I 11.5 ms (119) 33.75 Ills (1)127) 15 ms (111“!) 4375 Ills W) 1.875 5 (1:13”) 3.75 5 (1mm) Timelineview Numberof displayed segments 75 ms(61.25ms|imeinuvals Is 225 mstllllSmsfimi-tuvalsm) 90ms(721.25ms|ineimavfls(lbfi)) 2025 ms (1621.25 "minim-whom» Mmmlbmsfincimavalsalxlzn 5625 ms (‘50 1.5 Ills time inelvals (311115)) 310 ms (648 15 "Ethic imavds (5118)) 1.105 s (382 15 msflne imavils (‘55)) 1M 5 (1152 1.5 msflne imavlls (M4)) 1825 s (14531.5 msflneimuvlls (54:27)) 25 s m15 msflneimuvlls (6013)» 2.725 5 (2173 1.5 mstinc imavils (66:33)) 32‘ s (592 1.5 msline imavils (7215)) 3305 s (1112 1.5 mstine imavils (78139)) £41 5 (3528 1.25 msftn: imals (841.2» 50625 5 (4050 1.25 ms tine imavfls (90:65))
4.3.2.15 Single Segment Zoom
Zoom Menu Single Segment: Each selection defines the timeline displayed, the number of segments, and
number of 1.25 ms markers withing the segment. For example, selecting "33.75 ms (1x27)" will display
"33.75 ms" of the throughput graph in "1" segment with "27" markers.
The scroll bar at the bottom of the segment will scroll the throughput graph view port.
4.3.2.16 Multiple Segments
Zoom Menu Multiple Segment: Each selection defines the timeline view port, the number of segments, and
number of 1.25 ms markers withing the segment. For example, selecting "7.5 ms (6 1.25 ms time intervals
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 89
, RAMP “a... m... lama] Mm, 1., mm M Coexistence \fiew - Capture—2015-12-02_104121.da File Format Zoom Navugate Spectrum Help {ulnua
(3x2))" will display "7.5 ms" of the total timeline in "3" segments of with "2" markers per segment for a total
of "6" markers.
The scroll bar at the left of the segments will scroll the view through the timeline.
4.3.3 Coexistence View
(Click here to see an introduction video...)
The Coexistence View displays Classic Bluetooth,Bluetooth low energy, and 802.11 packets and throughput
in one view. You access the Coexistence View by clicking its button in the Control window or
Frame Display toolbars, or Coexistence View from the View menus.
Figure 4.44 - Coexistence View Window
4.3.3.1 Coexistence View Menus
The following tables
describe each of the
Coexistence View
Menus.
Selection Description
Reset Resets the Coexistence View window to its default settings.
Exit Closes the Coexistence View window.
Table 4.5 - Coexistence View File Menu Selections
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
90 Frontline BPA low energy Hardware & Software User Manual
Imsssos on page 98 on page 98 on page 98 on page 106
Selection Description
Show Packet
Number
When checked, the packet number shows below the packet in the Viewport.
Show Packet
Type
When checked, the packet type shows below the packet in the Viewport.
Show Packet
Subtype
When checked, the packet subtype shows below the packet in the Viewport, if
applicable.
Hide Packet
Text
When checked, hides any text shown below the packet in the Viewport. Applies the
text shown by the Show Packet Number, Show Packet Type, and Show Packet
Subtype menu selections.
Auto Hide
Packet Text
When
Duration >
31.25 ms.
When checked, automatically hides any text shown below the packet in the Viewport
when the Viewport duration exceeds 31.25 ms. Applies the text shown by the Show
Packet Number, Show Packet Type, and Show Packet Subtype menu selections.
The Viewport duration is shown at the bottom of the Viewport. This selection reduces
display clutter when viewing a larger timeline section.
Increase Auto
Hide Packet
Count from
4,000 to
20,000 (May
Be Slow)
When not checked, the default, the packets in the viewport are hidden if the number
of visible packets exceeds 4,000.
When checked, the default count increased from 4,000 to 20,000 packets before the
packets are hidden. Choosing this selection may slow down the displaying of the
packets.
The following three selections are mutually exclusive.
Use All
Packets for
Throughput
Indicators
When checked, all captured packets are used for average throughput calculations
and all packets in the last one second of the capture session are used for the 1 sec
throughput. See on page 98 for more information. Performs the same function as the
throughput indicator All radio button.
Use Selected
Packets for
Throughput
Indicators
When checked, the packets selected in the Viewport are used for average throughput
calculations, and selected packets in the one second before the last selected packet
are used for the 1 sec throughput. See on page 98 for more information. Performs the
same function as the throughput indicator Selected radio button.
Use Viewport
Packets for
Throughput
Indicators
When checked, all packets appearing in the Viewport are used for average
throughput calculations, and all packets in the one second before the last packet in
the Viewport are used for the 1 sec throughput. See on page 98 for more information.
Performs the same function as the throughput indicator Viewport radio button.
Set 802.11 Tx
Address
When checked, this selection is used to specify the 802.11 source address, where
any packet with that source address is considered a Tx packet and is shown with a
purple border in the timelines. Performs the same function as the SET button. Refer
to on page 106
The following three selections are mutually exclusive.
Show Packet
Throughput
When checked, the Throughput Graph and Throughput Indicator shows data based
on packet throughput. Performs the same function as the Throughput Packet radio
button.
Table 4.6 - Coexistence View Format Menu Selections
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 91
on page 100
Selection Description
Show Payload
Throughput
When checked, the Throughput Graph and Throughput Indicator shows data based
on payload throughput. Performs the same function as the Throughput Payload
radio button.
Show Both
Packet And
Payload
Throughput
When checked, the Throughput Graph will graph both the data based on packets
throughput in darker colors and payloay throughput in lighter colors. The Throughput
Indicator will show calculations based on packet throughput. Performs the same
function as the Throughput Both radio button.
The following four selections are mutually exclusive.
Show 5 GHz
Timeline
When checked, the 5 GHz Timeline is visible and the 2.4 GHz Timeline is not visible.
Only 802.11 5 GHz packets are shown. Performs the same function as the Timeline
5 GHz radio button.
Show 2.4 GHz
Timeline
When checked, the 2.4 GHz Timeline is visible and the 5 GHz Timeline is not visible.
The timeline will show Classic Bluetooth, Bluetooth Low Energy, and 802.11 2.4
GHz packets. Performs the same function as the Timeline 2.4 GHz radio button.
Show Both
2.4 GHz and 5
GHZ
Timelines
When checked, the 2.4 GHz Timeline and the 5GHZ Timeline is visible. Performs the
same function as the Timeline Both radio button.
Show
Timelines
Which Have
or Had
Packets (Auto
Mode)
When check,shows only timelines which have had packets at some point during this
session. If no packets are present, the 2.4 GHz Timeline is visible. Performs the
same function as the Timeline Auto radio button.
The following two selections are mutually exclusive.
Show Low
Energy
Packets From
Configurated
Devices Only
When checked, shows in the 2.4 GHz Timeline only packets from Bluetooth low
enegry devices configured for this session, and uses these packets for throughput
calculations. Performs the same function as the LE Devices Configured radio
button.
Show All Low
Energy
Packets
When checked, shows in the 2.4 GHz Timeline all Bluetooth low energy packets
captured in this session, and uses these packets for throughput calculations.
Performs the same function as the LE Devices All radio button.
Large
Throughput
Graph
When checked, the Throughput Graph appears in the bottom half of the window,
swapping position with the timeline.
When not checked, the Throughput Graph appears in its default position at the top of
the window.
Performs the same function as clicking the Swap button. See on page 100.
Table 4.6 - Coexistence View Format Menu Selections (continued)
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
92 Frontline BPA low energy Hardware & Software User Manual
on page 100 on page 100 on age 100 on gage 108
Selection Description
Show Dots in
Throughput
Graph ( Dots
Reveal
Overlapped
Data Points)
When checked, displays dots on the Throughput Graph. Dots are different sizes for
each technology so that they reveal overlapping data points which otherwise
wouldn’t be visible. A tooltip can be displayed for each dot. Performs the same
function as the Dots button. See on page 100.
Show
Zoomed
Throughput
Graph
When checked, dispalys a Zoomed Throughput Graph above the Throughput Graph.
The Zoomed Throughput Graph shows the details of the throughput in the time range
covered by the viewport in the Throughput Graph. Performs the same function as the
Show Zoom button.
When not checked, the Zoomed Throughput Graph is hidden. Performs the same
function as the Hide Zoom button.
See on page 100
.
Freeze Y
Scales in
Zoom
Throughput
Graph
Only active when the Zoomed Throughput Graph is visible.
When checked, it freezes the y-axis scales and makes it possible to compare all
time ranges and durations. Performs the same fuction as the Freeze Y button, which
appears with the Zoomed Throughput Graph.
When not checked, the y-axis scales are unfroozen. Performs the same function as
the Unfreeze Y button, which appears with the Zoomed Throughput Graph.
See on page 100
Show Tooltips
in Upper-Left
Corner of
Screen
When checked, Timeline and Throughput Graph tooltips will appear in the upper-left
corner of your computer sceen. You can relocate the tool tip for convenience or to
see the timeline or throughput graph unobstructed while displaying packet
information. See on page 108.
Table 4.6 - Coexistence View Format Menu Selections (continued)
Selection Description Hot Key
Zoom In When clicked,
Viewport time duration
decreased.
Ctrl+Plus
Zoom Out When clicked,
Viewport time duration
increases
Ctrl+Minus
The following two selectioins are mutually exclusive.
Scroll Tool (Mouse Wheel Scrolls - Ctrl Key
Switches to Zoom Tool)
When checked, sets the mouse wheel to scroll
the Viewport. Pressing the Ctrl key while
scrolling switches to zooming the Viewport.
Zoom Tool (Mouse Wheel Zooms- Ctrl Key
Switches to Scroll Tool)
When checked, sets the mouse wheel to zoom
the Viewport. Pressing the Ctrl key while
zooming switches to scrolling the Viewport.
Table 4.7 - Coexistence View Zoom Menu Selections
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 93
Note: Right-clicking anywhere in the Coexismnce View window will open the Zoom menu in a pop-up.
Selection Description Hot Key
Zoom To Time Range of Selected Packets Active only when packets are selected.
When clicked, the Viewport duration changes to
the time range covered by the selected
packets.
Zoom To Throughput Graph Data Point When clicked, the Viewport duration changes to
the time range of the Throughput Graph
selected data point.
Custom Zoom (Set by Zoom To Time Range of
Selected Packets, Zoom To Throughput Graph
Data Point, or dragging Viewport Slide)
Automatically checked when taking any zoom
action other than the fixed Viewport zoom
durations listed below.
The following 21 selections are mutually exclusive.
150 usec Each of these Zoom selections sets the
Viewport and the Timeline to a fixed time
duration.
300 usec
625 usec (1 Bluetooth slot)
1.25 msec (2 Bluetooth slots)
1.875 msec (3 Bluetooth slots)
2.5 msec (4 Bluetooth slots)
3.125 msec (5 Bluetooth slots)
6.25 msec (10 Bluetooth slots)
15.625 msec (25 Bluetooth slots)
31.25 msec (30 Bluetooth slots)
62.5 msec (100 Bluetooth slots)
156.255 msec (250 Bluetooth slots)
31.25 msec (500 Bluetooth slots)
625 msec (1,000 Bluetooth slots)
1 sec (1,600 Bluetooth slots)
2 sec (3,200 Bluetooth slots)
3 sec (4,800 Bluetooth slots)
4 sec (6,400 Bluetooth slots)
5 sec (8,000 Bluetooth slots)
10 sec (16,000 Bluetooth slots)
20 sec (32,000 Bluetooth slots)
Table 4.7 - Coexistence View Zoom Menu Selections (continued)
Note: Right-clicking anywhere in the Coexistence View window will open the Zoom
menu in a pop-up.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
94 Frontline BPA low energy Hardware & Software User Manual
hefi
Selection Description Hot key
First Packet When clicked, the first packet in the session is
selected and displayed in the Timeline.
Performs the same function as the First
Packet button.
Home
Last Packet When clicked, the last packet in the session is
selected and displayed in the Timeline.
Performs the same function as the Last
Packet button.
End
Previous
Packet
When clicked, the first packet occurring in
time prior to the currently selected packet is
selected and displayed in the Timeline.
Performs the same function as the
Previous Packet button.
Left Arrow
Next Packet When clicked, the first packet occurring next
in time from the currently selected packet is
selected and displayed in the Timeline.
Performs the same function as the Next
Packet button.
Right Arrow
Previous
Retransmitted
Packet
When clicked, selects the first prior retransmitted packet from the current selection
and displays it in the Timeline.. Performs the same function as the Previous
Retransmitted Packet button.
Next
Retransmitted
Packet
When clicked, selects the next retransmitted packet from the current selection and
displays it in the Timeline.. Performs the same function as the Next
Retransmitted Packet.
Previous
Invalid IFS
Packet
When clicked, selects the first prior invalid Bluetooth low energy IFS packet from the
current selection and displays it in the Timeline. Performs the same function as the
Previous Invalid IFS Packet button.
Next Invalid
IFS Packet
When clicked, selects the next invalid Bluetooth low energy IFS packet from the
current selection and displays it in the Timeline. Performs the same function as the
Next Invalid IFS Packet button.
Previous
Error Packet
When clicked, selects the first prior packet
with an error from the current selection and
displays it in the Timeline. Performs the same
function as the Previous Error Packet
button.
Ctrl+Left Arrow
Table 4.8 - Coexistence View Navigate Menu Selections
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 95
he» on Ege 107 he K on page 107 he * on Ege 107 he ‘ on page 107 hefl Note: Navigate menu selections are context sensitive. For example, If the first packet is selected, the Next Packet and the Last Packet selections are active, but the Previous Packet selection is inactive. GOOQMI IDMI I} {- I'MHI 4| I} I’llfiaQHEpl
Selection Description Hot key
Next Error
Packet
When clicked, selects the next packet with an
error from the current selection and displays it
in the Timeline. Performs the same function as
the Next Error Packet button.
Ctrl+Right Arrow
First Legend
Packet
When clicked, selects the first legend packet in the session and displays it in the
Timeline. This control is enabled when a bold packet type is selected in the
Coexistence View Legend. Refer to on page 107. Performs the same functions as
the First Legend Packet button.
Previous
Legend
Packet
When clicked, selects the first prior legend packet in time from the current selection
and displays it in the Timeline. This control is enabled when a bold packet type is
selected in the Coexistence View Legend. Refer to on page 107. Performs the same
functions as the Previous Legend Packet button.
Next Legend
Packet
When clicked, selects the next legend packet in time from the current selection and
displays it in the Timeline. This control is enabled when a bold packet type is selected
in the Coexistence View Legend. Refer to on page 107. Performs the same functions
as the Next Legend Packet button.
Last Legend
Packet
When clicked, selects the last legend packet in the session and displays it in the
Timeline. This control is enabled when a bold packet type is selected in the
Coexistence View Legend. Refer to on page 107. Performs the same functions as
the Last Legend Packet button.
Toggle
Display Lock
This selection is active during Live capture mode only. Checking this selection will
lock the Throughput Graph and the Timeline in its current position, however the
capture will continue. Not checking this selection will cause the Throughput Graph
and the Timeline to scroll as data is collected.
Table 4.8 - Coexistence View Navigate Menu Selections (continued)
Note: Navigate menu selections are context sensitive. For example, If the first packet is
selected, the Next Packet and the Last Packet selections are active, but the Previous
Packet selection is inactive.
4.3.3.2 Coexistence View - Toolbar
Figure 4.45 - Coexistence View Toolbar
The toolbar contains the following selections:
Icon Description
Move to the first packet.
Table 4.9 - Coexistence View Toolbar icons
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
96 Frontline BPA low energy Hardware & Software User Manual
Icon Description
Move to the previous packet.
Move to the next packet.
Move to the last packet.
Move to the previous retransmitted packet.
Move to the next retransmitted packet
Move to the previous invalid IFS for Bluetooth low energy.
Move to the next invalid IFS for Bluetooth low energy.
Move to the previous bad packet.
Move to the next bad packet.
Move to the first packet of the type selected in the legend.
Move to the previous packet of the type selected in the legend
Move to the next packet of the type selected in the legend.
Move to the last packet of the type selected in the legend.
Zoom in.
Zoom out.
Scroll cursor.
When selected the cursor changes from Scroll to a context-aware zooming cursor. Click
on normal cursor to remove the zooming cursor.
Zooming cursor.
Scroll Lock/Unlock during live capture mode.
Table 4.9 - Coexistence View Toolbar icons (continued)
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 97
Fackels‘ @All 0 Selecled OViewpavl Throughput 0 Packet ® Payload 0 Bath Throughgut grouE Throughput group Included gackets Packets: OAII 0 Selected OViewpavl LE Devices © Configured 0 All LE Devices
Icon Description
Reset during live capture mode. Clears the display.
Table 4.9 - Coexistence View Toolbar icons (continued)
4.3.3.3 Coexistence View - Throughput Indicators
(Click here to see a video on the Throughput Indicators...)
Throughput Indicators
Figure 4.46 - Coexistence View Throughput Indicators
Throughput indicatorsshow average throughput and 1 second throughput for Classic Bluetooth® (all
devices, master devices, and slave devices are each shown separately), Bluetooth low energy, and 802.11.
Throughput is total packet or payload size in bits of the included packets divided by the
duration of the included packets, where:
lPacket size is used if the Packet or Both radio button is selected in the Throughput group.
lPayload size is used if the Payload radio button is selected in the Throughput group.
lIncluded packets are defined separately for each of the radio buttons that appear above the
throughput indicators.
lDuration of the included packets is measured from the beginning of the first included packet to the
end of the last included packet.
The radio buttons above the throughput indicators specify
which packets are included. Radio button descriptions are modified per the following:
lBluetooth low energy packets from non-configured devices are excluded if the
Configured radio button in the LE Devices group is selected.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
98 Frontline BPA low energy Hardware & Software User Manual
Packets: GA" 0 Selected OViewpavl Packets: OAII ®Selecled OViewpoll Packet: OAII OSelected ©Viewpull
lFrame Display filtering has no effect here in that packets that are filtered-out in Frame Display
are still used here as long as they otherwise meet the criteria for each radio button as described
below.
All packets are used for average throughput, and
packets occurring in the last 1 second of the session
are used for 1 second throughput, except that
Bluetooth low energy packets from non-configured devices can be excluded as noted above.
Selected packets (the selected packet range is
shown in the timeline header) are used for average
throughput, and packets in the 1 second duration
ending at the end of the last selected packet are used for 1 second, except that Bluetooth low
energy packets from non-configured devices can be excluded as noted above.
Figure 4.47 - Timeline Header Showing Selected Packets
The viewport is the purple rectangle in the
Throughput Graph and indicates a specific starting
time, ending time, and resulting duration. Packets
that occur within that range of time are used for average throughput, and packets in the 1 second
duration ending at the end of the last packet in the viewport time range are used for 1 second
throughput, except that Bluetooth low energy packets from non-configured devices can be
excluded as noted above.
Figure 4.48 - Throughput Graph viewport.
The width of each indicator is the largest 1 second throughput seen up to that point for that technology
(Classic Bluetooth,Bluetooth low energy, or 802.11), where the 1 second throughput is calculated anew
each time another packet is received. The 1 second throughput indicator will never exceed this width,
but the average throughput indicator can. For example, the image below has a large average throughput
because the Selected radio button was selected and a single packet was selected, and the duration in that
case is the duration of the single packet, which makes for a very small denominator in the throughput
calculation. When the average throughput exceeds the indicator width, a plus sign (+) is drawn at the right
end of the indicator.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 99
Packels' OAI ® Selected OViewporl v—z— .u \vaml mmm m" 7 Imusmmwmw , so: H mm Clue-c ham “mm” ‘\ LE mow raw-w LEP m M sun-e ‘ m3“. ’ , a.» M - 1L w IIF M ‘ ”,2“me sump-yum 1'an Throughput group
Figure 4.49 - Average throughput indicators show a plus sign (+) when the indicator width is exceeded.
Figure 4.50 - A single selected packet
(Click here to see a video on how the Throughput is calculated...)
4.3.3.4 Coexistence View - Throughput Graph
(Click here to see aThroughput Graph video...)
Figure 4.51 - Coexistence View Throughput Graph
The Throughput Graph is a line graph that shows packet and/or payload throughput over time as specified
by the radio buttons in the Throughput group. If the Both radio button is selected, packet and payload
throughput are shown as two separate lines for each technology. The payload throughput line is always
below the packet throughput line (unless both are 0).
The data lines and y-axis labels are color-coded: Blue = Classic Bluetooth, Green = Bluetooth low energy,
Orange = 802.11. Each data point represents a duration which is initially 0.1 s. Each time the number of data
points per line reaches 300, the number of data points per line is halved to 150 and the duration per data
point is doubled. The duration per data point thus progresses from 0.1 s to 0.2 s to 0.4 s to 0.8 s and so on.
The y-axis labels show the throughput in bits per second. From left-to-right the labels are for 802.11,
Bluetooth low energy, and Classic Bluetooth. The duration of each data point must be taken into account
for the y-axis label’s value to be meaningful. For example, if a data point has a duration of 0.1 s and a bit
count of 100, it will have a throughput of 1,000 bits/s, and the y-axis labels will be consistent with this.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
100 Frontline BPA low energy Hardware & Software User Manual
A\ 1' \ _A 2.880 bilsls [Packet Throughpul - Classic] Ell Count 288 Duva|ion. 100 m >‘ Classic Packet: in Packet Hange15.435 ~ 15,437 \ Data Point 1 2 1\ Relocating Too‘ Tips
Figure 4.52 - Throughput Graph y-axis labels.
Retransmitted packets and bad packets (packets with CRC or Header errors) are excluded from
throughput calculations.
Placing the mouse pointer on a data point shows a tooltip for that data point. The tooltip first line shows
the throughput, the throughput type (packet or payload), and the technology. Subsequent lines show the
bit count, the duration of the data point, the packet range of that duration (only packets of the applicable
technology from that packet range are used for the throughput calculation), and the number of the data
point (which is 0 for the first data point in each line).
Figure 4.53 - Data point tooltip
The Throughput graph tool tips can be shown in the upper-left corner of your computer screen to provide
an unobstructed view. Refer to Relocating Tool Tips.
A discontinuity is when the timestamp going from one packet to the next either goes backward by any
amount or forward by more than 4.01 s. This value is used because the largest possible connection
interval in Bluetooth low energy is 4.0 s. A discontinuity is drawn as a vertical dashed line. A discontinuity
for a timestamp going backward is called a negative discontinuity and is shown in red. A discontinuity for a
timestamp going forward by more than 4.01 s is called a positive discontinuity and is shown in black. A
positive discontinuity is a cosmetic nicety to avoid lots of empty space. A negative discontinuity is an
error.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 101
Zooming
Figure 4.54 - A negative discontinuity.
Figure 4.55 - Three positive discontinuities.
The viewport is the purple rectangle in the Throughput Graph. It indicates a specific starting time,
ending time, and resulting duration, and is precisely the time range used by the Timeline. The packet
range that occurs within this time range is shown above the sides of the viewport.
Figure 4.56 - Throughput Graph Viewport
The viewport is moved by dragging it or by clicking on the desired location in the Throughput Graph
(the viewport will be centered at the click point).
The viewport is sized by dragging one of its sides or by using one of the other zooming techniques. See
the Zooming subsection in the Timeline section for a complete list.
The Throughput Graph and Timeline can be made to trade positions by clicking the Swap button.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
102 Frontline BPA low energy Hardware & Software User Manual
a ‘Q .. fl . r
Clicking the Swap button swaps the positions of the Throughput Graphs and the Timelines.
Figure 4.57 - Small Timeline and large Throughput Graph after pressing the Swap button.
The dots on the data points can be toggled on and off by clicking the Dots button. Dots are
different sizes for each technology so that they reveal overlapping data points which otherwise wouldn’t
be visible. A tooltip can be displayed for each dot.
Dots can be removed for greater visibility of the plots when data points are crowded together.
Figure 4.58 - Dots Toggled On and Off
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 103
Ovellapping Dots: Classic Bluaooth (lop) Eluetoolh law enegy (middle) 802,11 (bollom) Overlapplng Dots. Cursor placed on Vlsilble bonom am to display 802.11 packainlolmalion, u»! . [330.559 Hus (507.11 Packet Throughput) (3,120 hits I 3.192 ms) 802.11 Packets in Overall Packel Range 16.785 ~ 16,787 Data Point 85 _ ngllclick lo zoom to data palm ‘VOINU‘J 3 ' Zooming loomed Throughput ‘ scrollbars
Figure 4.59 - Overlapping Dots Information Display
Clicking the Show Zoom button displays the Zoomed Throughput Graph above the
Throughput Graph. The Zoomed Throughput Graph shows the details of the throughput in the time
range covered by the viewport in the Throughput Graph. Both the Zoomed Throughput Graph and
the Timelines are synchronized with the Throughput Graph’s viewport. The viewport is sized by
dragging one of its sides or by using one of the other zooming techniques listed in the Zooming subsection
in the Timelines section.
Figure 4.60 - Synchronized Zoomed Throughput Graph and View Port
The largest value in each technology in the Zoomed Throughput Graph is snapped to the top of the
graph. This makes the graph easier to read by using all of the available space, but because the y-axis scales
can change it can make it difficult to compare different time ranges or durations. Clicking the Freeze Y
button freezes the y-axis scales and makes it possible to compare all time ranges and
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
104 Frontline BPA low energy Hardware & Software User Manual
TmI-rgauvwoofum Inhnowyu m-pm an bpu'ml vlph 1m Vauhllmnnmn umumomwy ‘ valflvllm-nu C n , mpg-“mu lndnltnvlmlnm hen- Interval: Hide Zn 1 msec 1U msecs 1 IJIJ msecs 1 sec 2 secs usurp—1 u TumeHnes Zoomed Throughgut Gragh
durations (the name of the button changes to Unfreeze Y and a Y Scales Frozen indicator appears to
the right of the title. Clicking the Unfreeze Y button unfreezes the y-axis scales.
Figure 4.61 - Zoomed Throughput Graph- Largest Value Snaps to Top
Figure 4.62 - Zoomed Throughput Graph -Freeze Y keeps the y-axis constant
Interval Menu
The Interval drop-down menu is used to set the duration of each
data point in the Zoomed Throughput graph. The default setting is
Auto that sets the data point interval automatically depending on the
zoom level. The other menu selections provide the ability to select a
fixed data point interval. Selecting from a larger to a smaller interval
will display more data points. Should the number of data points
exceed 30,000, no data is displayed and a warning will appear in the
graph area.
Selecting the Zoom Cursor button changes the cursor to the zoom cursor . The zoom cursor is
controlled by the mouse wheel and zooms the viewport and thus the Timelines and the Zoomed
Throughput Graph. The zoom cursor appears everywhere except the Throughput Graph, which is not
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 105
02.11 Tx: DU‘Uc:29*85:13:31 302.11 Tx Address 302.11 Tx Address Each ”2.“ packet with this source address is considered a TX packet and is shown Nth a punk border. All source MAC addresses that have been seen dirhg this session are listed here. Also Isted is the last source MAC address that was set here in the previous session. If that address has not yet been seen in this session, it is shuwn 'n parentheses
zoomable, in which case the scroll cursor is shown. When the zoom cursor is in the Timelines or
Zoomed Throughput Graph zooming occurs around the point in time where the zoom cursor is
positioned. When the zoom cursor is outside the Timelines and the Zoomed Throughput Graph the
left edge of those displays is the zoom point.
The Throughput Graphs for Classic Bluetooth in the Coexistence View and the BluetoothTimeline
can look quite different even though they are plotting the same data. The reason is that the Coexistence
View uses timestamps while the BluetoothTimeline uses Bluetooth clocks, and they do not always match
up exactly. This mismatch can result in the data for a particular packet being included in different intervals
in the two Throughput Graphs, and can have a significant impact on the shapes of the two respective
graphs. This can also result in the total duration of the two Throughput Graphs being different.
Another factor that can affect total duration is that the BluetoothTimeline's Throughput Graph stops at
the last Classic Bluetooth packet while the Coexistence View’s Throughput Graph stops at the last
packet regardless of technology.
4.3.3.5 Coexistence View - Set Button
(Click here to see a video on the Wi-Fi Tx Address Set button...
The Set button is used to specify the 802.11 source address, where any
packet with that source address is considered a Tx packet and is shown
with a purple border in the timelines.
All source MAC addresses that have been seen during this session are listed in the dialog that appears when
the Set button is clicked. Also listed is the last source MAC address that was set in the dialog in the previous
session. If that address has not yet been seen in this session, it is shown in parentheses.
Figure 4.63 - 802.11 Source Address Dialog
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
106 Frontline BPA low energy Hardware & Software User Manual
302.11 Tx Address 302.11 TX Address DD:DE:29:85:f3:31 UU:UU:74:(5:ed:ZB UD:14:bf:72;b3:a6 Ufl:l(:lfl:64:ee:63 UU:1e:e5:42:Do:68 DD:24:21:33:ae:b2 00:2f:58:42:06:68 DD:SD:SG:E4:UU:UU 00:50:56:B4:00:04 flfl:50:56:fi4:flfl:flb 40:01:: b1ce 5(:26:D 9:40 7D:f1:al:e3:a3:a1 7a:e4:flfl:23:fi4:b5 ambazdbzfdzl 1 :a6 ffi:le:df:d5:b2:93 to address Is confldered 5 Tx packet and is shown Nth a ' been seen thing this session are listed here. “so isted at was set here in the previous session. If tha address has it is shown i1 parentheses. 1hroughput © Packet Throughput Graph 0 Payload 0 Both Timel'ne O 5 GHz 0 2.4 GHz ® Both OAma LE novices O Coniiguied © Al
Figure 4.64 - 802.11 Source Address Drop Down Selector
4.3.3.6 Coexistence View - Throughput Radio Buttons
The radio buttons in the Throughput group specify whether to show packet and/or payload
lines in the Throughput Graph, and also whether to show packet or payload throughput in
the throughput indicators (if the Both radio button is selected, packet throughput is shown
in the throughput indicators).
4.3.3.7 Coexistence View - Timeline Radio Buttons
The radio buttons in the Timeline group specify timeline visibility. The first three buttons
specify whether to show one or both timelines, while the Auto button shows only timelines
which have had packets at some point during this session. If no packets have been received
at all and the Auto button is selected the 2.4 GHz timeline is shown.
4.3.3.8 Coexistence View – low energy Devices Radio Buttons
The radio buttons in the LE Devices group (where “LE” means Bluetooth® low energy)
specify both visibility and inclusion in throughput calculations of Bluetooth low energy
packets. The All radio button shows and uses all Bluetooth low energy packets. The
Configured radio button shows and uses only Bluetooth low energy packets which come
from a configured device.
4.3.3.9 Coexistence View – Legend
(This video provides more details on the Legend...)
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 107
FED 2mm Bid Picket Click on any bold enlvy above to enable navigation u -... E‘,.-.E!.A..... E. . EL _
Figure 4.65 - Coexistence View Legend
The legend describes the color-coding used by packets in the timelines. Selecting a packet in a timeline
highlights the applicable entries in the legend. An entry is bold if any such packets currently exist. Clicking on
a bold entry enables the black legend navigation arrows in the toolbar for that entry.
4.3.3.10 Coexistence View – Timelines
(Click here to see a Coexistence View Timeline video...)
Figure 4.66 - Coexistence View Timelines
The Timelines show Classic Bluetooth® , Bluetooth low energy, and 802.11 packets by channel and time.
Packet information is provided in various ways as described below.
Packets are color-coded to indicate attribute (Retransmit, Bad Packet, Can’t Decrypt, or Invalid IFS),
master/Tx, technology (Classic Bluetooth® , Bluetooth low energy, or 802.11), and category/type.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
108 Frontline BPA low energy Hardware & Software User Manual
Selection Box Attribuie (Elad Packei) Master/TX (Master) Technology (Classic Elluetooth) Packet Categovy orType (AOL) FED ammn Bad Packet Click on any bold enlvy above to enable navigation
Figure 4.67 - Each packet is color-coded
The innermost box (which indicates packet category/type) is the packet proper in that its vertical position
indicates the channel, its length indicates the packet’s duration in the air, its left edge indicates the start
time, and its right edge indicates the end time.
The height of Classic Bluetooth and Bluetooth low energy packets indicates their frequency range (1 MHz
and 2 MHz respectively). Since 802.11 channels are so wide (22 MHz), 802.11 packets are drawn with an
arbitrary 1 MHz height and centered within a separate frequency range box which indicates the actual
frequency range.
Selecting a packet by clicking on it draws a selection box around it (as shown above) and highlights the
applicable entries in the legend.
Figure 4.68 - Highlighted entries in the legend for a selected packet.
Summary information for a selected packet is displayed in the timeline header.
Figure 4.69 - Timeline header for a single selected packet.
When multiple packets are selected (by dragging the mouse with the left button held down, clicking one
packet and shift-clicking another, or clicking one packet and pressing shift-arrow), the header shows Gap
(duration between the first and last selected packets), Timestamp Delta (difference between the
timestamps, which are at the beginning of each packet), and Span (duration from the beginning of the
first selected packet to the end of the last selected packet).
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 109
mummy-bu ShowlhdnTypq « mums-hype mammal « MNHEPmeWth>3l5nK 1555mm '15.457 DM’I .5351 mm Packs 15.457 [cumin] - om 3/17/5711 m n :13 mm AM [Ben'minu Tinzslawl an mm m Al masnsa AM [Ending 1mm) Dumm 2m us Rah Mm. Channel 36 2433 MHz Ebck: mnnaasm Packet sum cm: Elm [-01 FLEIW Eu 1m. um LTJDDR' a mu? Hm I30 Lagmal Lmk ID LEAP mu a. nu haunt-liar: SEUN 1 ARDN' n Puma Luv». a [53x a 17 bylzs max] chwm by Emma»: um No Emma: msnzuzm
Figure 4.70 - Timeline header for multiple selected packets
Text can be displayed at each packet by selecting Show
Packet Number,Show Packet Type, and Show Packet
Subtype from the Format menu.
Figure 4.71 - Descriptive text on timeline packets.
Placing the mouse pointer on a packet displays a tooltip (color-coded by technology) that gives detailed
information.
Figure 4.72 - A tool tip for a Classic Bluetooth packet.
You can relocate the tool tip for convenience or to see the timeline or throughput graph unobstructed
while displaying packet information. In the Format menu select Show Tooltips in Upper-Left
Corner of Screen, and any time you mouse-over a packet the tool tip will appear anchored in the
upper-left corner of the computer screen. To return to viewing the tool tip adjacent to the packets
deselect the tool tip format option in the menu.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
110 Frontline BPA low energy Hardware & Software User Manual
m camsmmM :7 Smfiu Cam": GWAA 2:: n m zaam Navigate Hglp smpka Number smpkatyp: smpkammyp: Hungkeflm m, rm: kaa m wm mam a am as ham Am ma: kael Caum Flam 0,000 In 20,000 [May 3: sum) Us: All kaets luv 1:.ngan Indicators Us: 35:45: kaets luv 1:.ngan Indicators Us: Wampum kaets luv 1:.ngan Indicators 3:: 30211 Tn Mam « 3m kael maugnpm 3m Payload maugnpm 3m Bmh kael and Payload maugnpm 3m 5 an: Tlmrlin: « 3m u an: Tlmrlin: 3m Ruth 5 an: and u an: Tlmrlim 5m 1mm wm Haw: u! Had kams (Ma max) 3m [m Enugy kaets Flam Canngmd Daka om, Em All [m Enugy ankets |a.9: maugnpm Glaph « 3m Dms in maugnpm Glaph [Dms Rma: (mam: Data Pains) 5m Zoom Tmuugnpm Graph a A « 3m Tmhlps m Uppum Calm! at Sam
Figure 4.73 - Coexistence View Format Menu - Show Tooltips on Computer Screen
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 111
I» am gummy mm. ‘5'”) , LLIB: Culfinu-fian/Emply alumna 12 a 54 mm PM fieunnma fimeslamv) {I upmrmmugd. 3mm“: u u 54 mm m Enung I'Imaflamp) mum an“: 7 Rule Sue! 6,, g | 1 5 L1 I Channzl Index «a , 2m MHz Mm; mama Fmercnlena'm arm energy dame: m smmmmmzsws.‘ Em sum Received mm :nnrs FDU Lena": 2 LEDAYAiAccenMnmss umamaa cm a my mum mmmumn uLuD Emmy MD MES" ISN ‘ g mmmmm We , Smugvjammefisfiva] a. m. m We", w, @090 $2; $9 @q; ©<::>:> El Facke‘sG/M seemed mm: Smwznnm ERNIE El mum rm. m9: «- much! "mm. ”mm. a . “5°“ ‘7'“ a 515m
Figure 4.74 - Coexistence View Timeline Tool Tip Shown Anchored to Computer Screen
There are two Timelines available for viewing, one for the 5 GHz range and one for the 2.4 GHz range.
Classic Bluetooth and Bluetooth low energy occur only in the 2.4 GHz range. 802.11 can occur in both.
Figure 4.75 - 5 GHz and 2.4 GHz 802.11 packets
The y-axis labels show the channels for each technology and are color-coded: Blue = Classic Bluetooth,
Green = Bluetooth low energy, Orange = 802.11.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
112 Frontline BPA low energy Hardware & Software User Manual
Throughgut Gragh <15 411="" 802."="" 5="" eh!="" an»="" channe‘t="" mlh="" a="" base="" yams="" a="" 5="" eh:="" and="" fixing:="" a!="" eiher="" 2n="" n="" 40="" mhz="" me="" thawn="" have.="" due="" |n="" space="" \‘mmaims,="" sachdaamd‘="" mam="" mm="" fixed="" mm="" mm="" d="" harm="" wand="" lalowe="" lo="" a:="" dam="" hum="" nlhe!="" m:="" as="" i:="" dun:="" win="" 24="" eh1="" chamls="" [th="" it»="" excamm="" nr="" anzm="" channel="" 141="" 22.2mm.»="" n.="" mm,="" m-zmwx="" 2:722:24»="" 21.2mm="" w-quwx="" m-uawx="" in-zmwz="" vii-202mhz="" 2.2mm="" ‘2-zahmnk="" 2242mm="" 32-20mm="" a-ztswux="" ibztiiwr="" 724174sz="" mm="" ‘2="" 24mm:="" 2="" 222m:="" n="" 2a3s="">4m 53 25st 2 245qu 72 2mm ‘5-24mm 25-2A27w2 22.2mm w-zmwx 56-2-57on ss-zmwz 22.2mm wignsw; 1:2A2wm nlmm nimswx wiztmux nimmw 7522wa ‘8 242mm: 2 law: as 244mm 2mm 52 21mm: 2 2mm 7: 22mm Vmmum-nuwannammmmudummam‘ mum...”tu Muenmzmnw rumma-zMum-unam-wmnwmmumnw mmmww mmmmuwimebaumanm mwwnmwwwm» 2.2mm mmm “443wa v9.2.«m 24-24mm 22 2mm 34-247mm 2.1mm u-msw: $.22;st m-quwx 15-245mm “-225.24.” 36-20st "mm: ‘2 mwm ‘ mm; 22 215mm: 2 241mm: 22 «mm: B 22mm w:mmum:V-uaut‘nmmmryuumwmm mmam mmmm.am.m_g.».. .ummmsumn ".me E-mwnm-nunmm Wm“ Whamhummemmmumm We:nnzMmemmwnmuannu Imamwz 2:.mm2w mmwm a 2225215222242 \m-nannwu WSAEuw-Jman‘ 2.225222%: (umumvwx‘ «2922“wa 9444121an \mnumzwxl \USAEmA-n-rd 2. «‘onqu (cumaxzmwu ”42me 1n-2u521mwx Mammm ‘mmmm "mum: (“.mww Warm-Hum n Hmzlwwx hmmzw 22922»,wa 5.2222“:qu (cumaxzmwu ”42me 12-252mwx 22....“222224242 \Emnpndavml 2252mm 22."..22222124222 mzmwm u mumw, 2...2.2mm ‘2“me 7-2121 222W: (22MM2W «2922“wa mummm ‘mnm‘m mm VM-wmh/mmnwar-M‘amuhnahummnmanmmn mammwanzummmuum mmmmmnmhmqmm mm
The 5 GHz timeline has only 802.11 channel labels, and the rows alternate orange and white, one row per
channel.
The 2.4 GHz timeline has labels for all three technologies. The rows alternate blue and white, one row per
Classic Bluetooth channel. The labels going left-to-right are 802.11 channels, Bluetooth low energy
advertising channels, Bluetooth low energy regular channels, and Classic Bluetooth channels.
The Viewport Packet Range above the timelines shows the packet range and packet count of packets
that would be visible if both timelines were shown (i.e. hiding one of the timelines doesn’t change the
packet range or count). This packet range matches the packet range shown above the viewport in the
Throughput Graph, as it must since the viewport defines the time range used by the timelines. When no
packets are in the time range, each of the two packet numbers is drawn with an arrow to indicate the
next packet in each direction and can be clicked on to navigate to that packet (the packet number changes
color when the mouse pointer is placed on it in this case).
An arrow points to the next packet when no packets are in the time range.
An arrowed packet number changes color when the mouse pointer is on it. Clicking navigates
to that packet.
The header shows information for packets that are selected.
The footer shows the beginning/ending timestamps and visible duration of the timelines.
The ‘i’ buttons bring up channel information windows, which describe channel details for each
technology. They make for interesting reading.
Figure 4.76 - 5 GHz information window
Figure 4.77 - 2.4 GHz information windows
When zoomed in far enough Bluetooth slot markers appear in the 2.4 GHz timeline. A Bluetooth slot is
625 µs wide.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 113
Figure 4.78 - Vertical blue lines are Bluetooth slot markers
1. Drag one of the sides of the Throughput Graph viewport.
2. Select a zoom preset from the Zoom or right-click menus.
3. Select the Zoom In or Zoom Out button or menu item.
4. Turn the mouse wheel in the Timelines or the Zoomed Throughput Graph while the zoom
cursor is selected. The action is the same as selecting the Zoom In and Zoom Out buttons and
menu items except that the time point at the mouse pointer is kept in place if possible.
5. Select the Zoom to Data Point Packet Range menu item, which zooms to the packet range
shown in the most recently displayed tool tip.
6. Select the Zoom to Selected Packet Range menu item, which zooms to the selected packet
range as indicated in the Selected Packets text in the timeline header.
7. Select the Custom Zoom menu item. This is the zoom level from the most recent drag of a
viewport side, selection of Zoom to Data Point Packet Range, or selection of Zoom to
Selected Packet.
The zoom buttons and tools step through the zoom presets and custom zoom, where the custom zoom is
logically inserted in value order into the zoom preset list for this purpose.
(Click here to see a Timeline Discontinuities video...)
A discontinuity is when the timestamp going from one packet to the next either goes backward by any
amount or forward by more than 4.01 s (this value is used because the largest possible connection
interval in Bluetooth low energy is 4.0 s). A discontinuity is drawn as a vertical cross-hatched area one
Bluetooth slot (625 µs) in width. A discontinuity for a timestamp going backward is called a negative
discontinuity and is shown in red. A discontinuity for a timestamp going forward by more than 4.01 s is
called a positive discontinuity and is shown in black. A positive discontinuity is a cosmetic nicety to avoid
lots of empty space. A negative discontinuity is an error.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
114 Frontline BPA low energy Hardware & Software User Manual
15.625 ms (vel) 1.21m. (lbs)
Figure 4.79 - A negative discontinuity
Figure 4.80 - A positive discontinuity
When there are one or more discontinuities the actual time encompassed by the visible timeline differs
from the zoom level duration that would apply in the absence of any discontinuities. The actual time,
referred to as absolute time, is shown followed by “(abs)”. The zoom level duration, referred to as
relative time, is shown followed by “(rel)”. When there are no discontinuities, relative and absolute time
are the same and a single value is shown.
Figure 4.81 - Timeline header with discontinuity
Figure 4.82 - Timeline duration footer with discontinuity
For example, the timeline above has a zoom level duration of 15.625 ms (the relative time shown in the
footer). But the discontinuity graphic consumes the width of a Bluetooth slot (625 µs), and that area is
7.19984 s of absolute time as shown by the Gap value in the header. So the absolute time is 7.21484 s:
Zoom level duration – Bluetooth slot duration + Gap duration =
15.625 ms - 625 µs + 7.19984 s =
0.015625 s – 0.000625 s + 7.199840 s =
0.015000 s + 7.199840 s =
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 115
Note: This topic applies only to Classic Bluetooth. lawlmmg—M . A4, how . .. y... ”.2. a u- u. manna W it p... m 5 w.- . : . m n. m... [mu 9.. w-u
7.214840 s =
7.21484 s
High-speed Bluetooth packets, where Bluetooth content hitches a ride on 802.11 packets, have a blue
frequency range box instead of orange as with regular 802.11 packets (both are shown below), and the
tool tip has two colors, orange for 802.11 layers and blue for Bluetooth layers.
Figure 4.83 - High-speed Bluetooth packets have a blue frequency box and a two-tone tool tip
4.3.3.11 Coexistence View - No Packets Displayed with Missing Channel
Numbers
Note: This topic applies only to Classic Bluetooth.
Captured packets that don’t contain a channel number, such as HCI and BTSnoop, will not be displayed. When
no packets have a channel number the Coexistence View Throughput Graph and Timelines will display
a message: "Packets without a channel number (such as HCI) won't be shown."
Figure 4.84 - Missing Channel Numbers Message in Timelines
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
116 Frontline BPA low energy Hardware & Software User Manual
°cwmwma§fiswrm a v... m w mu... nu, (2....an am Clm 5m .H Cbgflnmfle lap-M1 awwmw mmmnnaumvm mm. mm Dumb-lump.” 0 am: m swans Mamas Help CHE fovfldpl’vssfl mnmwmw ommw an... aMMs—m-a (balm-m. as a. mo Mam Unfilamtw mm a: 1 (\mwm mmwmw Sdsd Whnuodemscefl: WWW .mmnmkflfisspurnn m Vvlw m was Mum us. i'i l H§4\%\E om... mumnmm mam wbmvaax wywwmmum m mks 1 Ckkmsflnw animal z Gizknnc msaeuemspemm km”, w...
4.3.3.12 High Speed Live View
When using the Frontline®802.11 in conjunction with other ComProbe devices, or in a stand-alone
configuration, a smaller version of the standard Coexistence View is available. This High Speed Live
View is essentially the Viewport from the standard Coexistence View.
When viewing High Speed Live, only 802.11 traffic is visible. Because Bluetooth packets are slow they are
not visible in High Speed mode.
1. Click on the Control window File menu and select Close.
2. The Control window will open again. Click on the Control Window File menu and select Go Live
(High-Speed Mode)
3. Click on the Control window Start Capture button to begin capturing data. Click on the
Coexistence View button and the High-Speed View will appear.
The Coexistence View (High Speed Live Mode) window will appear.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 117
mMmmm-wmm w, W mm mm m ::\_n¢::> :nJVwOOs law—Ma. 6mm. ”mm "mm M...“ mm"... .mwom. .m»... .MW um . Innmorlw» '1: WMWW ARR”- EIEDGQII ifiafi Mumsculaun-vwhumuus-mmw‘nl my mm.» mm. mm m ms ummm :u u anmnm » M ' " Wan-"Mun- “mm“ mm». Wm, MM. :1...— nan-am: “W" chmm mm“ {M .u 0pm: Wm um "ms-am mu 11.5'nlsa4wiu w: "msmm [Maw—u. nuns. "sum an. mm" mm." mu n ma My. mx u-mmm. mu “mummy omoazxmm , ~ mmmun
Figure 4.85 - High-Speed Live Window
4.3.4 Message Sequence Chart (MSC)
The Message Sequence Chart (MSC) displays information about the messages passed between protocol
layers. MSC displays a concise overview of a Blutetooth connection, highlighting the essential elements fo the
connection. At a glance, you can see the flow of the data including role switches, connection requests, and
errors. You can look at all the packets int he capture, or filter by protocol or profile. the MSC is color coded for
a clear and easy view of your data.
Figure 4.86 - Message Sequence Chart Window
How do I access the chart?
You access the Message Sequence Chart by selecting the icon or MSC Chart from the View menu from
the Control window or Frame Display.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
118 Frontline BPA low energy Hardware & Software User Manual
AAASL 000 Click hereto learn more about this option. Class: amt LE Tabs m" n mm Chssn .m LE widens are avaiahte “'"V‘" 3' ,IW,LWEWV14W¥fl RFCOMM Mgnaling own-cl (:lcalcd
What do I see on the dialog?
At the top of the dialog you see four icons that you use to zoom in and out of the
display vertically and horizontally. The same controls are available under the View
menu.
There are three navigation icons also on the toolbar.
This takes you to the first Information Frame.
This takes you to first Protocol State Message.
This takes you to the first Error Frame. Click here to learn more about this option.
If there is both Classic and low energy packets, there will be a Classic and LE tab at the top of the dialog.
Figure 4.87 - Classic and LE tabs
If the Classic tab is selected, you will see Classic protocols. If you select the LE tab, you will see LE
Protocols. If there is only Classic or only LE, the Classic and LE tabs will not appear.
Also along the top of the dialog are a series of
protocol tabs. The tabs will vary depending on
the captured protocols.
Clicking on a tab displays the messaging
between the master and slave for that
protocol. For example, if you select
RFCOMM, you will see the messaging
between the RFCOMM{M} Master,
and the RFCOMM{S} Slave.
The Non-Message Summary tab displays
all the non-message items in the data.
The Ctrl Summary tab displays the
signaling packets for all layers in one
window in the order in which they are received.
The information in the colored boxes displays general information about the messaging. The same is true for
each one of the protocols.
If you want to see the all the messaging in one dialog, you select the All Layers tab.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 119
m- lumuum m. n-Amuuwl Frame D 2'“! In ammo mm an mm- H mm mm :4 “an LIILIInlm-uluanl In. mun-nu by lbw. 250 ”In. 1m:
When you move the mouse
over the message description
you see an expanded tool tip.
If you position the cursor
outside of the message box, the
tool tip will only display for a
few seconds.
If, however, you position the
cursor within the tool tip box,
the message will remain until you move the cursor out of the box.
Additionally, If you right click on a message description, you will see the select Show all Layers button.
When you select Show all Layers, the chart will display all the messaging layers.
The Frame# and Time of the packets are displayed on the left side of the chart.
Figure 4.88 - Frame# and Time Display, inside red box.
If you click on the description of the message interaction, the corresponding information is highlighted in
Frame Display.
Figure 4.89 - MSC Synchronization with Frame Display
How do I navigate in the dialog?
You can use the navigation arrows at the bottom and the right side of the dialog to move vertically and
horizontally. You can also click and hold while moving the pointer within dialog that brings up a directional
arrow that you can use to move left/right and up/down.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
120 Frontline BPA low energy Hardware & Software User Manual
"My.“ cmsumm-Iy h-w:¢5umnnry as m Izw sup mm as Avnw ”mm“ 9 Ill1,!lll s I LMFLMRW‘ Iamu m I mpg-“Jug“ mm s I LMFJnxmzl man s I LIIFLpiduI: _m: quI I s I Lug-"mm Sum 'luufll I0!,IIII u I mpg-mm: mun s I LMFJdcknzlJll: Iumn u I LMP_I-IuI|I l msMMqu nus: s I Ulluwml mun u I LMPJtmeSCDJIVILIu nemm 5:0 mm nus: s I Lulu-mun mum u I magnum mun u I mun-um n. mm: s I wthmu mm: s I lMPJnMJeu Sum III-"I nun u I lull-mama : ,. may...“ m. Hun-III Hut-El? K mu”.- msumuy Nun-M sum-y as DIP sz snP VWI‘VWU an: is u mum I nrcuwym ‘- I: II unnnznnncnz I mummy-.1: I: s I mam-«gm: m s I arcnuuLm :1 u lllz‘lzbflldk I snowy“ aux M s I urcnw m m u nnnnnnurnr I mp .Im um. n-n Mllayuu culsmn-Iy lawn-mm an In“? uwrsnu nicwu us ngwrgvnwssgm“ I ~ In.) I 5 mp (we. I mm M I Lott-ungainly“ nun s I my m. I I x I sml u I ml: mm
Ctrl Summary tab
When you select the Ctrl Summary tab you will see a summary of the control and signaling frames in the
order that they are received/transmitted from and to devices.
Figure 4.90 - Control and Signaling Frames Summay
The frame numbered is shown, whether the message comes from the Master or Slave, the message Address,
the message itself, and the timestamp.
Additionally, the control/signaling packets for each layer are shown in a different background color.
Figure 4.91 - Packet Layers Shown in Different Colors
If you right click within the Ctrl Summary, you can select Show in MSC.
Figure 4.92 - Right-Click in Ctrl Summary to Display Show in MSC
The window then displays the same information, but in the normal MSC view.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 121
an .. cmsmn-ry umm Summx an mp um sup Meow ur AVDTF Amslgnxllnn 4 . Iv: n Iv i rut-viii: w mum. mISumm-w No-rullsummvy 53 L14“ um sow mow ur mum mmsxwunwg 3”:th I gum-rm Whhfi-fll‘lflfw mmfimuvm Sunpum mumlnu In um». um mum fiflfipp—HEOGQflWfiWéé‘ prop
Figure 4.93 - MSC View of Selected Packet from Ctrl Summary
You can return to the text version by using a right click and selecting Show in Text.
Figure 4.94 - Return to Text View Using Right-Click Menu
You can also choose to show:
lFrame # only
lTime only
lShow both Frame# and Time
lHide both Frame# and Time
4.3.4.1 Message Sequence Chart Toolbar
Figure 4.95 - Message Sequence Chart Toolbar
Tool Keyboard Description
Ctrl + H Zoom in horizontal - expands the chart horizontal view
Shift + H Zoom out horizontal - compresses the chart horizontal view
Ctrl + V Zoom in vertical - expands the chart vertical view
Table 4.10 - Message Sequence Chart Tools
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
122 Frontline BPA low energy Hardware & Software User Manual
11p @GEWW0095EE sum layu and mung: Pvrxoui lm k‘t‘P Mama mauve
Tool Keyboard Description
Shift + V Zoom out vertical - compresses the chart vertical view
Shift + F Go to frame
F3 Search
F2 Search for prior Search criteria.
F4 search for Next criteria.
Ctrl + I Go to first information message
Ctrl +S Go to first protocol state message
Ctrl +E Go to first error frame
/
Shift + L Lock / unlock the chart display. Clicking on the active icon or typing the
keyboard command will toggle to the other state.
Ctrl + W Print display preview
Ctrl + P Print the display
Ctrl + C Cancel an in-process print
Table 4.10 - Message Sequence Chart Tools (continued)
4.3.4.2 Message Sequence Chart - Search
The Message Sequence Chart has a Search function that makes it easy to find a specific type message within
the layers.
When you select the 1) Search icon or 2)
use F3 key, the Select layer and message
dialog appears.
From this dialog you can search for specific
protocol messages or search for the first error
frame.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 123
Note: If you select All Layers in Step 1, the Protocol Layers drop-down list is active. If you select any of the other single protocols, the Protocol Layers drop- down is grayed out. Selerl layer and mesuge Prutnmt Lays! AVDIP Slundlnfl an em HF I 12c» mp RFCOMM so? 5M5 )p wcoum OEEX BIP VFTP oarx connection In: m: mp [Bugle Imaglng Image Push] prnlile uenled 5 mm ‘7< n="" n="" ‘="" mm'mmrm="" e]="" search="" "i="" i="">
1. On the MSC dialog select one of the protocol tabs at the top.
Note: If you select All Layers in Step 1, the Protocol Layers drop-down list is
active. If you select any of the other single protocols, the Protocol Layers drop-
down is grayed out.
2. Or Open the Search dialog using the Search icon or the F3 key.
3. Select a specific Protocol Message from
the drop-down list.
4. Once you select the Protocol Message,
click OK
The Search dialog disappears and the first
search result is highlight in the Message
Sequence Chart.
Figure 4.96 - Highlighted First Search Result
If there is no instance of the search value, you see this following dialog.
Once you have set the search value, you can 1) use the Search
Previous and Search Next buttons or 2) F2 and F4 to
move to the next or previous frame in the chart.
4.3.4.3 Message Sequence Chart - Go To Frame
The Message Sequence Chart has a Go To Frame function that makes it easy to find a specific frame
within the layers.
In addition to Search, you can also locate specific frames by clicking on the Go To Frame toolbar
icon.
1. Click Go To Frame in the toolbar.
2. Enter a frame number in the Enter frame No.: text box.
3. Click OK.
The Go To Frame dialog disappears and the selected frame is
highlighted in the chart.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
124 Frontline BPA low energy Hardware & Software User Manual
Selecl layer 5e|ect layer: AZDP Selectlayer Select layer: tut-P C DI LMP c FTS4BT 9%
Once you have identified the frame in Go To, you can 1) use the Search Previous and Search Next
buttons or 2) F2 and F4 keys to move to the next or previous frame in the chart.
4.3.4.4 Message Sequence Chart - First Error Frame
When you select Go to first error frame from the toolbar , the Select layer dialog appears.
You have to select a layer from the drop down list to choose what layer you want to search for the error.
Once you select a layer, then OK, the first error for that layer will be displayed.
If no error is found, a dialog will announce that event.
4.3.4.5 Message Sequence Chart - Printing
There are three standard MSC print buttons. Print Preview,Print, and Cancel
Printing.
Print Preview
1. When you select Print Preview , the Print Setup dialog appears.
2. You next need to select your printer from the drop-down list, set printer properties, and format the
print output..
3. Then you select OK.
After you select OK, the Message Sequence Chart Print Preview dialog appears.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 125
$6lfl-flfi MEI-n K4 >un Irv: Message Seguence Chart é$flfink MEI |K< rm:-="" fiflfifl="" page="" e="" 015="">
Figure 4.97 - Message Sequence Chart Print Preview
The information in the dialog will vary depending on the layer that is selected in the Message Sequence Chart,
the properties of the printer you select, and the amount of data in the layer (which will correspond to the
number of pages displayed).
You control what you see and when to print using the toolbar at the top of the dialog.
Figure 4.98 - Print Preview Toolbar
Icon Name Description
Print Prints all the pages to the printer you
select in Print Setup dialog.
When you select Print, you will output
the data that is currently being
displayed.
Cancel Printing Cancels the current printing.
Zoom In Horizontially Expands the data horizontally so it can
be easier to read.
Zoom Out Horizontally Squeezes the data together so that more
fits on one page.
Zoom In Vertically Expands the data vertically so it can be
easier to read.
Zoom Out Vertically Squeezes the data so that more fits on
one page.
Current Page The current page text box displays the
page number this is currently shown in
the dialog.
You can enter a number in the text box,
then press Enter, and the dialog will
display the data for that page.
Table 4.11 - Print Preview Icons
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
126 Frontline BPA low energy Hardware & Software User Manual
M‘DH Scl‘v,
Icon Name Description
Page navigation If the data requires multiple pages, the
navigation buttons will take you to:
lThe first page
lThe previous page
lThe next page
lThe last page
Close Print Preview Closes the dialog and returns to the
Message Sequence Chart
Select Font Size Allows selection of the print font size
from the drop-down control.
Table 4.11 - Print Preview Icons (Continued)
4.4 Packet Error Rate Statistics
The Packet Error Rate (PER) Stats view provides a dynamic graphical representation of the Packet Error
Rate for each channel. The dialog displays a graph for each Classic Bluetooth channel numbered 0 through 78
and for each Bluetooth low energy channel numbered 0 through 39.
Packet Error Rate Stats assist in detecting bad communication connections. When a high percentage of re-
transmits, and/or header/payload errors occur, careful analysis of the statistics indicate whether the two
devices under test are experiencing trouble communicating, or the packet sniffer is having difficulty listening.
Generally, if the statistics display either a large number of re-transmits with few errors or an equal number of
errors and re-transmits, then the two devices are not communicating clearly. However, if the statistics display
a large number of errors and a small number of re-transmits, then the packet sniffer is not receiving the
transmissions clearly.
You can access this window in Bluetooth low energy by selecting the Bluetooth low energy Packet Error
Rates Statistics icon from the Control window or Frame Display. You can also open the window
from the View menu on the same windows.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 127
- n z u 4 u . v - . n n u n u n u n n
Bluetooth low energy Packet Error Rate
Figure 4.99 - Bluetooth low energy PER Stats Window
4.4.1 Packet Error Rate - Channels
The main portion of the PER Stats dialog displays the .
Figure 4.100 - Bluetooth low energy Packet Error Rate Channels
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
128 Frontline BPA low energy Hardware & Software User Manual
megahertz [MHz] for the channel if the option is chosen in the Additional Statistics section. exganded chart on the uEEer right Viewport u 0......“ I
lThe red number at the top of the channel shows the percentage of Header Error and Payload/CRC Errors
in relationship to the total number of packets in the channel.
lThe light blue number at the top of each channel shows the megahertz (MHz) for the channel if the option
is chosen in the Additional Statistics section.
lWhen you select a channel, detailed information for that channel is displayed in the expanded chart on
the upper right.
lThe channels change dynamically as the Viewport is moved or new data appears within the Viewport.
lThe Channel Not Available symbol is displayed if the channel is not available in the
most recent channel map that is in or before the last selected packet, even if that channel
map comes before the first selected packet. Bluetooth Adaptive Frequency Hopping
processes will block channels determined to be unreliable. These channels are not
available because the Bluetooth devices have decided not to use them.
l"s" changes the size of the entire dialog.
l"c" changes the contrast of the dialog
lThe Reset button is only available in live mode. The button will appear in the
lower right-hand corner of the Channels section. Clicking on the Reset
button will clear all prior data from PER Stats.
4.4.2 Packet Error Rate - Pie Chart and Expanded Chart
The Expanded PER Stats Chart (in the upper right ) displays detailed information about the channel
selected from the main channel dialog.
Expanded Chart Pie Chart
lWhen PER Stats is first opened, Channel 0 is displayed in the expanded chart.
lThe top orange number on the Y-Axis displays the maximum number of packets in Snap Mode. If Snap
Mode is turned off, the number will display in light blue. For information about Snap Mode, seePacket
Error Rate - Additional Statistics on the next page
lThe number of the selected channel is displayed in the upper-left corner of the expanded chart.
lThe combined value of Header and Payload/CRC errors for the channel is displayed in red as a percentage
to the right of the channel number.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 129
Packet Error Rate - ScroH Bar on gage 132 PER Stats Channe‘ main channels chart exganded chart Hm
lThe megahertz (MHz) value is displayed in light blue text if the MHz option is selected in the Additional
Statistics section.
lThe number of packets with no errors is displayed in light green in the bar chart.
lAll the values, except MHz, change dynamically when multiple time periods are selected in the Packet
Error Rate - Scroll Bar on page 132.
lWhen you select the in the upper-right corner, the bar chart is replaced
by a pie chart. The pie chart applies to all channels, not a selected channel. To
return to the bar chart, click on the channel again or click on the in the
upper right hand corner.
4.4.3 Packet Error Rate - Legend
The Legend displays color coded information about the channel selected.
Bluetooth low energy
For Bluetooth low energy:
lThe number of Packets with No Errors and percentage of packets with No Errors in relationship to total
packets for the channel is displayed in green.
lThe number of Packets with CRC Errors and percentage of packets with CRC Errors in relationship to
total packets for the channel is displayed in dark red.
lTotal packets and Total percentage is displayed in light blue.
For a description of the Channel Not Available symbol, see PER Stats Channel.
4.4.4 Packet Error Rate - Additional Statistics
This Additional Statistics section of PER Stats displays
information about selected packets, duration, and Y-Axis
max, and it also has two controls.
lSelecting MHz On displays the megahertz value
for each channel in the main channels chart and also in
the expanded chart.
lSelecting MHz Off removes the megahertz
value.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
130 Frontline BPA low energy Hardware & Software User Manual
Scroll Bar 9, Scroll Bar Scroll Bar I values for channels in the main Chan Scroll Bar values for channels in the main chart Scroll Bar Viewpon. um um- um
lSelected Packets displays the packet range selected in the Scroll Bar. This includes inapplicable
packets.
Inapplicable packets include Wi-Fi packets, Sniffer Debug packets, any packets that are not relevant to
PER Stats. Inapplicable packets do not appear as part of the Additional Statistics. packets.
lSelected Duration identifies the total amount of time in the selected packet range displayed in the
Scroll Bar.
lDuration Per Bar in Scrollbar: identifies the amount of time represented by each bar in the Scroll Bar.
lThe Channel Graph Y-Axis Max can display two different values. When the Snap Arrow is orange
, the values for channels in the main chart are shown in relative terms in Snap Mode. This means
that one channel (or channels) with the greatest value is "snapped" to the top of the chart. In the graphic
below left, Channel 33 is snapped to the top of the chart.
Thechannel(s) with the greatest value become a full-scale reference display for the other channels that
have been relatively scaled. Channel comparisons become easier.
With Snap On you can select multiple time values in the Scroll Bar.
When the Snap Arrow is white (Snap Mode turned off), the
values for channels in the main chart are shown in absolute values
where the max value of each channel graph is the same regardless of
the position of the Viewport. Channel 33, which is snapped to the
top of the chart in Snap Mode (shown above left), appears like the right image when Snap Mode is turned
off.
lScrollbar Y-Axis Max displays the maximum Y-Axis value in the Scroll Bar.
4.4.5 Packet Error Rate - Sync Selected Packets With Other Windows
By default, and unlike other windows, PER Stats is not synchronized with
other windows such as Frame Display in that selecting a frame range in
one does not highlight the same frame range in the other. This ensures
that Frame Display isn’t constantly re-synchronizing during live capture
while the view-port is maximized in PER Stats. If PER Stats synchronization is desired, it can be enabled by
checking the Sync Selected Packets with Other Windows check box.
4.4.6 Packet Error Rate - Export
The Export section of PER Stats allows you to export data to a .csv or .txt file.
1. To use the Export, select a range of data using the Viewport.
2. Select .csv or .txt from Export Selected Data, depending on
what type of data file you want. The Save As dialog appears.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 131
as.“ a UV flu Mm . Mm . mm x (mm V g ‘4) m N 9 gym. Mum. v a mun-mu A “in: mmm J Mm a pm, anmmnm ”mm 8 Wm I ‘fl‘w- 1 mm 5 mu. m an gun-um mm ».- ~u Mum-m) V 4 Rem wwwmwnwm\smlm 5mm: :3”th 7‘ ‘ Mm, Sm XE] 09 wk;
Figure 4.101 - Save As dialog in PER Stats Export
3. Select a location where you want to save the file in "Save in:".
4. Enter a file name in "File name:".
5. Select "Save".
The file will be saved to that location.
4.4.7 Packet Error Rate - Scroll Bar
The PER Stats Scroll Bar displays stats for all packets, divided into equal time intervals.
Figure 4.102 - PER Stats Scroll Bar
lCaptured data begins to appear on the left and fills the width of the bar, left to right.
lThe vertical bars in the Scroll Bar each indicate a fixed duration. When data first appears in the Scroll
Bar as it is being captured, each bar equals one second. When the data fills the bar, reaching the right side
limit, the last bar moves back to the center of the Scroll Bar. The bars stay the same size, but doubles in
duration (for example, the first time the Scroll Bar fills, the bars return to the middle, but now each bar
represent two seconds of time instead of one). Each time the bars cycle to the middle, the time they
represent doubles. When the bars move and the Viewport (see below) is not maximized, the Viewport
moves with the bars so that the same packet range is indicated. When the Viewport is maximized it stays
maximized regardless of what the bars do. This ensures that the display can be made to reflect all packets
at all times by maximizing the .
lThe Viewport is used to select single or multiple vertical bars .
lYou can drag the sides of the Viewport or the slider buttons to select multiple bars, representing a
greater time range.
lYou can click and drag the Viewport within the Scroll Bar.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
132 Frontline BPA low energy Hardware & Software User Manual
Frame DisEIaZ Frame Display
lWhen you select a packet range in Frame Display that includes only some of the frames in PER Stats, the
Viewport snaps up against the side of the bar with the unselected frames .
lWhen you select a packet range in Frame Display that includes all of the frames in PER Stats, the Viewport
displays a space between the Viewport sides and the bar .
lDouble clicking anywhere inside the Scroll Bar selects the entire Scroll Bar. Double clicking again
toggles back to the previous size of the Viewport.
lSelecting Ctrl+A is the same as double-clicking.
lClicking on a vertical bar left justifies the Viewport to that bar.
lShift-clicking on a bar extends the nearest Viewport side to include that bar.
lThe Home key moves the Viewport to the left edge.
lThe End key moves the Viewport to the right edge.
lPressing the left arrow button , the left arrow key, or the up arrow key moves the Viewport to the
left, one vertical bar at a time.
lPressing the right arrow button . the right arrow key, or the down arrow key moves the Viewport to
the right, one vertical bar at a time.
lPressing the double left arrow button or the PgUp key moves the Viewport to the left by the current
width of the Viewport. Holding down the Shift key will prevent the Viewport from moving if there is not
enough room to move by its full width.
lPressing the double right arrow button or the PgDn key moves the Viewport to the right by the
current width of the Viewport. Holding down the Shift key will prevent the Viewport from moving if
there is not enough room to move by its full width.
lHolding the Shift key down and the right or left arrows moves the right side of the Viewport.
lHolding the Ctrl key down and the right or left arrows moves the left side of the Viewport.
lThe Scroll bar includes inapplicable packets (sniffer debug, WiFi, etc) so that the packet range selected in
Frame Display can be shown. Inapplicable packets are not, however, included in the statistics reports.
lIf the Viewport is adjusted within PER Stats, as opposed to selecting a packet range in Frame Display, it
uses only whole bars on both sides.
lStatistics are retained for all packets regardless of whether any of those packets have wrapped out. You
can select the Reset button , which is located above the right portion of the Scroll Bar, to
discard all stats for packets received up to that point.
lThe Reset button is only available when you are capturing data.
4.5 Analyzing Byte Level Data
4.5.1 Event Display
To open this window click the Event Display icon on the Control window toolbar.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 133
III. oEvunD'qivy-Honuxh El :1 B m: Edn Wm Format Bookmarks 0M Window Help EvenlNumhal u‘ 1‘ 2‘ a‘fi 5‘ s‘j 8‘ 5‘1n 11‘12‘ ISME . 4321 S‘ave nouns-n: II n nut-51s cabana an n ll Mags. ‘3]? It 46 56 C0 23 S‘ave a: n6 23 ab». on no 01 n- Mama L163 Db 9d 5 as on as on u- S‘ave Mafia was S‘ave a mucozansaseoo 01 07 11 I n 2150 Masts was S‘ave D an: ohsascoo 1:15.01 l- n usumzaob Mwu mm :2 :7 sa {0 2: 0b 9a S‘m ' Eva:4,naf4,mfrun: m) snrznu magnum Sun: ASCII Mu a: 0d Buy an: M 11 39 .7 MIMI“ mmpmfl CamuredBymehfomwhon ‘
The Event Display window provides detailed information about every captured event. Events include data
bytes, data related information such as start-of-frame and end-of-frame flags, and the analyzer information,
such as when the data capture was paused. Data bytes are displayed in hex on the left side of the window,
with the corresponding ASCII character on the right.
Figure 4.103 - Event Display
Click on an event to find out more about it. The three status lines at the bottom of the window are updated
with information such as the time the event occurred (for data bytes, the time the byte was captured), the
value of the byte in hex, decimal, octal, and binary, any errors associated with the byte, and more.
Events with errors are shown in red to make them easy to spot.
When capturing data live, the analyzer continually updates the Event Display as data is captured. Make sure
the Lock icon is displayed on the toolbar to prevent the display from updating (Clicking on the icon again
will unlock the display). While locked, you can review your data, run searches, determine delta time intervals
between bytes, and check CRCs. To resume updating the display, click the Lock icon again.
You can have more than one Event Display open at a time. Click the Duplicate View icon to create a
second, independent Event Display window. You can lock one copy of the Event Display and analyze your
data, while the second Event Display updates as new data is captured.
Event Display is synchronized with the Frame Display and Mesage Sequence Chart dialogs. Selecting a
byte in Event Display will also select the related frame in the Frame Display and the related message in
the Message Sequence Chart.
4.5.2 The Event Display Toolbar
Home – Brings the Control window to the front.
Open a capture file
Start Capture - Begins data capture to disk.
Stop Capture - Closes a capture file and stops data capture to disk.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
134 Frontline BPA low energy Hardware & Software User Manual
aufiafi hmlmmnflz‘ m
Save - Prompts user for a file name. If the user supplies a name, a .cfa file is saved.
Clear- Discards the temporary file and clears the display.
MSC Chart - Opens the Message Sequence Chart
Lock - In the Lock state, the window is locked so you can review a portion of data. Data
capture continues in the background. Clicking on the Lock icon unlocks the window.
Unlock - In the Unlock state, the screen fills in the data captured since the screen lock
and moves down to display incoming data again. Clicking on the Unlock icon locks the
window.
Duplicate View - Creates a second Event Display window identical to the first.
Frame Display - (framed data only) Brings up a Frame Display, with the frame of the
currently selected bytes highlighted.
Display Capture Notes - Brings up the Capture Notes window where you can view or add
notes to the capture file.
Add/Modify Bookmark - Add a new or modify an existing bookmark.
Display All Bookmarks - Shows all bookmarks and lets you move between bookmarks.
Find - Search for errors, string patterns, special events and more.
Go To - Opens the Go To dialog, where you can specify which event number to go to.
CRC - Change the algorithm and seed value used to calculate CRCs. To calculate a
CRC, select a byte range, and the CRC appears in the status lines at the bottom of the
Event Display.
Mixed Sides - (Serial data only) By default, the analyzer shows data with the DTE side
above the DCE side. This is called DTE over DCE format. DTE data has a white
background and DCE data has a gray background. The analyzer can also display data in
mixed side format. In this format, the analyzer does not separate DTE data from DCE
data but shows all data on the same line as it comes in. DTE data is still shown with a
white background and DCE data with a gray background so that you can distinguish
between the two. The benefit of using this format is that more data fits onto one screen.
Character Only - The analyzer shows both the number (hex, binary, etc.) data and the
character (ASCII, EBCDIC or BAUDOT) data on the same screen. If you do not wish to
see the hex characters, click on the Character Only button. Click again to go back to both
number and character mode.
Number Only - Controls whether the analyzer displays data in both character and number
format, or just number format. Click once to show only numeric values, and again to show
both character and numeric values.
All Events - Controls whether the analyzer shows all events in the window, or only data
bytes. Events include control signal changes and framing information.
Timestamping Options – Brings up the timestamping options window which has options
for customizing the display and capture of timestamps.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 135
Sum Suml's MD Sum 2': mp LHD [XOR] xun n can.) CHM 84w CRE-DCIYT CHC-DZITva EREHDLE
4.5.3 Opening Multiple Event Display Windows
Click the Duplicate View icon from the Event Display toolbar to open a second Event Display
window.
You can open as many Event Display windows as you like. Each Event Display is independent of the
others and can show different data, use a different radix or character set, or be frozen or live.
The Event Display windows are numbered in the title bar. If you have multiple Event Displays open, click
on the Event Display icon on the Control window toolbar to show a list of all the Event Displays
currently open. Select a window from the list to bring it to the front.
4.5.4 Calculating CRCs or FCSs
The cyclic redundancy check (CRC) is a function on the Event Display window used to produce a checksum.
The frame check sequence (FCS) are the extra checksum characters added to a frame to detect errors.
1. Open the Event Display window.
2. Click and drag to select the data for which you want to generate a CRC.
3. Click on the CRC icon .
4. In the CRC dialog box, click on the down arrow to show the
list of choices for CRC algorithms. Choose an algorithm to use.
Choose CRC 32 (Ethernet). Choose CRC 32 (Ethernet) for
Ethernet data or the appropriate CRC type for serial data.
5. Enter a Seed value in hexadecimal if desired.
6. Click OK to generate the CRC. It appears in the byte
information lines at the bottom of the Event Display window.
Whenever you select a range of data, a CRC using the
algorithm you selected is calculated automatically.
Calculating CRC for interwoven data
4.5.5 Calculating Delta Times and Data Rates
1. Click on the Event Display icon on the Control window to open the Event Display window.
2. Use the mouse to select the data you want to calculate a delta time and rate for.
3. The Event Display window displays the delta time and the data rate in the status lines at the bottom
of the window.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
136 Frontline BPA low energy Hardware & Software User Manual
omwm‘mw Ne Em! View anut Bonkmivu 0mm": Window He‘p mm 'I‘flMM'EIm-v/A Mafia mmmmgmnmmtm Muhammmmu Rah Ddh Sn: 01c mm am mm: mzwzmsnm m a w on page 139
Figure 4.104 - Delta fields
4.5.6 Switching Between Live Update and Review Mode
The Event Display and Frame Display windows can update to display new data during live capture, or be
frozen to allow data analysis. By default, the Event Display continually updates with new data, and the
Frame Display is locked.
1. Make sure the Lock icon is active so the display is locked and unable to scroll.
2. Click the Unlock icon again to resume live update.
The analyzer continues to capture data in the background while the display is locked. Upon resuming live
update, the display updates with the latest data.
You can have more than one Event Display or Frame Display window open at a time. Click the
Duplicate View icon to open additional Event or Frame Display windows. The lock/resume function is
independent on each window. This means that you can have two Event Display windows open
simultaneously, and one window can be locked while the other continues to update.
4.5.7 Data Formats and Symbols
4.5.7.1 Switching Between Viewing All Events and Viewing Data Events
By default, the analyzer on the Event Display dialog shows all events1that include:
lData bytes
lStart-of-frame
lEnd-of-frame characters
lData Captured Was Paused.
Click on the Display All Events icon to remove the non-data events. Click again to display all events.
See on page 139 for a list of all the special events shown in the analyzer and what they mean.
1An event is anything that happens on the circuit or which affects data capture. Data bytes, control signal changes, and
long and short breaks are all events, as are I/O Settings changes and Data Capture Paused and Resumed.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 137
.000 I0d0 RS Display minibus in Binay Display numbus in om: Displly nlllllbas in Duinal \ J Display numbfls in "maria: lnusuh unimaginndpmnu...“ Sank. Sumanblcmmmllxl m 7i pspmoimmm 7 DsnliyOnh/Chamcn Disnbyfidsslmm 7i kabyallEvemlM-zmufiun lam change my. "WNW...” Display numbers?" Oml pkpbynimmnmm. 7i DWMMMMW
4.5.7.2 Switching Between Hex, Decimal, Octal or Binary
On the Event Display window the analyzer displays data in Hex by default. There are several ways to change
the radix1used to display data.
Go to the Format menu and select the radix you want. A check mark next to the radix indicates which set is
currently being used.
Figure 4.105 - Format Menu
1. Right-click on the data display header labels and choose a different radix.
Figure 4.106 - Header labels, right click
2. Or right-click anywhere in the data display and select a different radix.
Figure 4.107 - Data display right click menu
If you want to see only the numerical values, click on the Numbers Only icon on the Event Display
toolbar.
1The base of a number system. Binary is base 2, octal is base 8, decimal is base 10 and hexadecimal is base 16.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
138 Frontline BPA low energy Hardware & Software User Manual
4.5.7.3 Switching Between ASCII, EBCDIC, and Baudot
On the Event Display window, the analyzer displays data in ASCII by default when you click on the
Characters Only icon . There are several ways to change the character set used to display data.
1. Go to the Format menu and select the character set you want. A check mark next to the character
set indicates which set is currently being used.
2. With the data displayed in characters, right-click on the data panel header label to choose a different
character set.
If you want to see only characters, click on the Characters Only icon on the Event Display toolbar.
4.5.7.4 Selecting Mixed Channel/Sides
If you want to get more data on the Event Display window, you can switch to mixed sides mode. This mode
puts all the data together on the same line. Data from one side (Slave ) is shown on a white background and
data from the other side (Master )is shown on a gray background.
1. Click once on the Mixed Sides icon to put the display in mixed sides mode.
2. Click again to return to side over side mode.
3. You can right click in the center of the data display window to change between mixed and side over
side modes by selecting Display Sides Together. A check mark is displayed. Click on Display
Sides Together to remove the check mark and return to side-by-side display.
4. Right click in the sides panel on the right of the data display and select Display Sides Together. A
check mark is displayed. Click on Display Sides Together to remove the check mark and return to
side-by-side display.
4.5.7.5 List of all Event Symbols
By default, the Event Display shows all events1, which includes control signal changes, start and end of
frame characters and flow control changes. If you want to see only the data bytes, click on the All Events
button . Click again to display all events.
Click on a symbol, and the analyzer displays the symbol name and sometimes additional information in the
status lines at the bottom of the Event Display window. For example, clicking on a control signal change
symbol displays which signal(s) changed.
In addition to data bytes, the events shown are (in alphabetical order):
Symbol Event
Abort
Broken Frame - The frame did not end when the analyzer expected it to. This occurs most
often with protocols where the framing is indicated by a specific character, control signal
change, or other data related event.
Table 4.12 - Event Symbols
1An event is anything that happens on the circuit or which affects data capture. Data bytes, control signal changes, and
long and short breaks are all events, as are I/O Settings changes and Data Capture Paused and Resumed.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 139
Symbol Event
Buffer Overflow - Indicates a buffer overflow error. A buffer overflow always causes a
broken frame.
Control Signal Change - One or more control signals changed state. Click on the symbol,
and the analyzer displays which signal(s) changed at the bottom of the Event Display
window.
Data Capture Paused - The Pause icon was clicked, pausing data capture. No data is
recorded while capture is paused.
Data Capture Resumed - The Pause icon was clicked again, resuming data capture.
Dropped Frames - Some number of frames were lost. Click on the symbol, and the analyzer
displays many frames were lost at the bottom of the Event Display window.
End of Frame - Marks the end of a frame.
Flow Control Active - An event occurred which caused flow control to become active (i.e.
caused the analyzer to stop transmitting data) Events which activate flow control are signal
changes or the receipt of an XON character.
Flow Control Inactive - An event occurred which caused flow control to become inactive (i.e.
caused the analyzer to transmit data). Events which deactivate flow control are signal
changes or the receipt of an XOFF character.
Frame Recognizer Change - A lowest layer protocol was selected or removed here, causing
the frame recognizer to be turned off or on.
I/O Settings Change - A change was made in the I/O Settings window which altered the
baud, parity, or other circuit setting.
Long Break
Low Power - The battery in the ComProbe®is low.
Short Break
SPY Event (SPY Mode only) - SPY events are commands sent by the application being
spied on to the UART.
Start of Frame - Marks the start of a frame.
Begin Sync Character Strip
End Sync Character Strip
Sync Dropped
Sync Found
Sync Hunt Entered
Sync Lost
Test Device Stopped Responding - The analyzer lost contact with the ComProbe for some
reason, often because there is no power to the ComProbe.
Table 4.12 - Event Symbols (continued)
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
140 Frontline BPA low energy Hardware & Software User Manual
<~>®1 Sgt Tillleslamp Fonnat.. Change ”I: Font SIZE". Choose CRC Method... Change Font Sim
Symbol Event
Test Device Began Responding - The analyzer regained contact with the ComProbe.
Timestamping Disabled - Timestamping was turned off. Events following this event are not
timestamped.
Timestamping Enabled - Timestamping was turned on. Events following this event have
timestamps.
Truncated Frame- A frame that is not the same size as indicated within its protocol.
Underrun Error
Unknown Event
Table 4.12 - Event Symbols (continued)
4.5.7.6 Font Size
The font size can be changed on several Event Display windows. Changing the font size on one window
does not affect the font size on any other window.
To change the font size:
1. Click on Event Display menu Options, and select Change the Font Size.
Figure 4.108 - Event Display Options menu
2. Choose a font size from the list.
Figure 4.109 - Event Display Font Size Selection
3. Click OK.
4.6 Data/Audio Extraction
You use Data/Audio Extraction to pull out data from various decoded Bluetooth protocols. Once you have
extracted the data, you can save them into different file types, such as text files, graphic files, email files, .mp3
files, and more. Then you can examine the specific files information individually.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 141
Data/Mam human 5mm; UD-n Flam All-i Emma" sou/25m Dvmm wile sum. an My Mom Film - Elna Sleien We D EnnvulALm and u law in Lnsav FEM Evsu Remy: cnnvalsd D Add slim: vackzl: Ema-2! Note: This does not work for SCO/eSCO. Note: This option is for SCO/eSCO only. Note: This option is for SCO/eSCO only. Note: This option is for SCO/eSCO only.
1. You access this dialog by selecting Extract Data/Audio from the View menu or by clicking on the icon
from the toolbar .
Figure 4.110 - Data/Audio Extraction Settings dialog
2. Choose a checkbox(es) on the left side of the dialog to identify from which profile(s) you want to
extract data.
It's important to note that if there is no data for the profile(s) you select, no extracted file is created.
3. If you want the file(s) to open automatically after they are extracted, select the Open File(s) After
Extraction checkbox.
Note: This does not work for SCO/eSCO.
4. Click on a radio button to write the streams as Two Mono Files or as One Stereo File.
Note: This option is for SCO/eSCO only.
5. Select the checkbox if you want to convert A-Law and µ-law to Linear PCM.
CVSD are always converted to Linear PCM. It's probably a good idea to convert to Linear PCM since
more media players accept this format.
Note: This option is for SCO/eSCO only.
6. Select the Add Silence packets to insert the silence packets (dummy packets) for the reserved
empty slots into the extracted file. If this option is not selected, the audio packets are extracted
without inserting the silence packets for the reserved empty slots.
Note: This option is for SCO/eSCO only.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
142 Frontline BPA low energy Hardware & Software User Manual
>4me mw.-~_u.—a_.._.~—. mm nu m In)" w.” mvuwupn, ‘ mmr m rhcwmnsnvm-«um-a "-va nr-su-m- Iguana-mum mcwmusW-a-m. mush-rung nos-womb“ MoDPFanthu-a Mama-mailman
7. Select Extract.
ASave As dialog appears.
The application will assign a file name and file
type for each profile you select in Step 1
above. The file type varies depending on the
original profile. A separate file for each profile
will be created, but only for those profiles with
available data.
8. Select a location for the file.
9. Click Save.
The Data Extraction Status and Audio
Extraction Status dialogs appear. When the
process is complete the dialogs display what
files have been created and where they are located.
Figure 4.111 - Data and Audio Extraction Status
If you selected Open Files(s) After Extraction, the files open automatically.
10. If you did not select this option, you can open a file by simply double-clicking on the name.
Also, if a file type is unknown, you can select the file and it appears in the Rename to: text box.
Chapter 4 Capturing and Analyzing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 143
no a... sum «ma A n; c moan—u- ma Sewa¢WssklwWa wmwwwmmwmw . um ta an anus-m m MM” ‘-
Figure 4.112 - Rename To in the bottom section of Data Extraction Status
Then you can rename the file, adding a file type to attempt to open the file.
When you are finished, select Close to close the dialogs.
TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data
144 Frontline BPA low energy Hardware & Software User Manual
I TEIEDYNE LECRD! Everywhereyoulook
Chapter 5 Navigating and Searching the Data
The following sections describe how to navigate through the data and how to find specific data or packet
conditions of interest to the user.
5.1 Find
Capturing and decoding data within the ComProbe analyzer produces a wealth of information for analysis.
This mass of information by itself, however, is just that, a mass of information. There has to be ways to manage
the information. ComProbe software provides a number of different methods for making the data more
accessible. One of these methods is Find.
Figure 5.1 - Find Dialog
Frontline BPA low energy Hardware & Software User Manual 145
P E] n Note: The tabs displayed on the Find dialog depend on the product you are mnning and the content of the capture file you are viewing. om y...‘ n- ero; swzm‘ Ian-k} @swras-wom Dlwmun "‘3“ 3i; manu- Osmraut-m Osman-c: I» OSI-diFaM an.
Find, as the name suggests, is a comprehensive search function that allows users to search for strings or
patterns in the data or in the frame decode. You can search for errors, control signal changes, bookmarks,
special events, time, and more. Once the information is located, you can easily move to every instance of the
Find results.
5.1.1 Searching within Decodes
Searching within decodes lets you to do a string search on the data in the Decode Pane of the Frame
Display window.
To access the search within decodes function:
1. Open a capture fileto search.
2. Open the Event Display or Frame Display window.
3. Click on the Find icon or choose Find from the Edit menu.
4. Click on the Decode tab of the Find dialog.
Note: The tabs displayed on the Find dialog depend on the product you are running and the
content of the capture file you are viewing.
Figure 5.2 - Find Decode Tab Search for String
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data
146 Frontline BPA low energy Hardware & Software User Manual
Owns-mum OSn-chfaflim 05m Fa run Ealefl Own: Mum-Inn... Sdnfimhm Gummy-wanna.” OSo-chmvmm Elm loot (musqudqmmm) _ nun out: molt 01cm: —unr-muu— —Nnmn-v- 9‘35 run-Mush
Figure 5.3 - Find Decode Tab Side Restriction
There are several options for error searching on the Decoder tab.
lSearch For String in Decoder allows you to enter a string in the text box. You can use characters, hex
or binary digits, wildcards or a combination of any of the formats when entering your string. Every time
you type in a search string, the analyzer saves the search. The next time you open Find, the drop-down
list will contain your search parameters.
lSearch for All Errors finds frame errors as well as frames with byte-level errors (such as parity or CRC
errors).
lSearch for Frame Errors Only finds frame specific errors, such as frame check errors.
lSearch for Information Frame only searches information frames.
1. Enter the search string.
2. Check Ignore Case to do a case-insensitive search.
3. When you have specified the time interval you want to use, click on the Find Next or Find Previous
buttons to start the search from the current event.
The result of the search is displayed in the Decode pane in Frame Display.
Side Restrictions -Side Restriction means that the
analyzer looks for a pattern coming wholly from the DTE or DCE
side. If you choose to search without regard for data origin, the
analyzer looks for a pattern coming from one or both sides. For
example, if you choose to search for the pattern ABC and you
choose to search without regard for data origin, the analyzer
finds all three instances of ABC shown here.
The first pattern, with the A and the C coming from the DTE
device and the B coming from the DCE is a good example of
how using a side restriction differs from searching without
regard to data origin. While searching without regard for data
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 147
f} l mu Duplay .3. ls2 Ali] aflfi mfl— h DYE V 0E v :mnmuduzsmm) m D‘- alcm': cncnc: «armour ~unn-n-p— 9:3 Fan-hm" Note: Side Restriction is available for pattern and error searching. Note: The tabs displayed on the Find dialog depend on the product you are anning and the content of the capture file you are viewing.
origin finds all three patterns, searching using a side restriction never finds the first pattern, because it does
not come wholly from one side or the other.
If you choose to search for the pattern ABC, and you restrict
the search to just the DTE side, the analyzer finds the following
pattern:
In this example, the analyzer finds only the second pattern
(highlighted above) because we restricted the search to just
the DTE side. The first pattern doesn't qualify because it is split
between the DTE and DCE sides, and the third pattern, though
whole, comes from just the DCE side.
If we choose both the DTE and the DCE sides in the above
example, then the analyzer finds the second pattern followed
by the third pattern, but not the first pattern. This is because
each side has one instance in which the whole pattern can be
found. The analyzer completely searches the DTE side first, followed by the DCE side.
Note: Side Restriction is available for pattern and error searching.
1. Select one of the two options.
2. Select DTE,DCE, or both.
3. When you made your selections, click on the Find Next or Find Previous buttons to start the
search from the current event.
The result of the search is displayed in the Decode pane in Frame Display.
5.1.2 Searching by Pattern
Search by Pattern lets you perform a traditional string search. You can combine any of the formats when
entering your string, and your search can include wildcards.
To access the search by pattern function:
1. Open a capture fileto search.
2. Open the Event Display or Frame Display window.
3. Click on the Find icon or choose Find from the Edit menu.
4. Click on the Pattern tab of the Find dialog.
Note: The tabs displayed on the Find dialog depend on the product you are running and the
content of the capture file you are viewing.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data
148 Frontline BPA low energy Hardware & Software User Manual
Dm‘ man 1... rEoYur SpeadEvu-i: ammr pm v m, Hmmmm Durham rm smvauum m mummy: 7m.m..amma Tnmu7u\mwwm\ Decode PM Yin Golo swim: sou he now ’ van-n v Em N-vdmukl U'W'w' Bmv‘n-w WWII“: unmasivbfimn-ahn-yfi lomflfia\pfivmdum\ Smfln'nflm Osmmmmmm Osman-nan [2101! most M on page 146
Figure 5.4 - Find Pattern Tab
Figure 5.5 - Find Pattern Tab Side Restrictions
Pattern allows you to enter a string in the text box. You can use characters, hex or binary digits, control
characters, wildcards or a combination of any of the formats when entering your string. Every time you type
in a search string, the ComProbe analyzer saves the search. The next time you open Find, the drop-down list
will contain your search parameters.
1. Enter the search pattern.
2. Check Ignore Case to do a case-insensitive search.
3. When you have specified the pattern you want to use, click on the Find Next or Find Previous
buttons to start the search from the current event.
The result of the search is displayed in the in Frame Display and Event Display.
Refer to Searching by Decode on page146 for information on Side Restrictions
5.1.3 Searching by Time
Searching with Time allows you search on timestamps on the data in Frame Display and Event Display
window.
To access the search by time function:
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 149
Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. Note: Month and Year are not available if you select Relative.
1. Open a capture fileto search.
2. Open the Event Display or Frame Display window.
3. Click on the Find icon or choose Find from the Edit menu.
4. Click on the Time tab of the Find dialog.
Note: The tabs displayed on the Find dialog depend on the product you are running and the
content of the capture file you are viewing.
Figure 5.6 - Find by Time tab
The analyzer can search by time in several different ways.
Search for Absolute/Relative timestamp.
lAbsolute - An absolute timestamp search means that the analyzer searches for an event at the exact date
and time specified. If no event is found at that time, the analyzer goes to the nearest event either before
or after the selected time, based on the "Go to the timestamp" selection.
lRelative - A relative search means that the analyzer begins searching from whatever event you are
currently on, and search for the next event a specific amount of time away.
1. Select Absolute or Relative
2. Select the date and time using the drop-down lists for Month,Year,Day,Hour,Minute,Second,
1/10000000.
Note: Month and Year are not available if you select Relative.
3. When you have specified the time interval you want to use, click on the Go To,Move Forward or
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data
150 Frontline BPA low energy Hardware & Software User Manual
Note: When you select Absolu'e as Search for, Go To is available. When you select Relative as Search for, Move Fomard or Move Backwardis available.
Move Backward buttons to start the search from the current event.
Note: When you select Absolute as Search for,Go To is available. When you
select Relative as Search for,Move Forward or Move Backwardis available.
Go to the timestamp: On or before/ On or after
The analyzer searches for an event that matches the time specified. If no event is found at the time specified,
the analyzer goes to the nearest event either before or after the specified time. Choose whether to have the
analyzer go to the nearest event before the specified time or after the specified time by clicking the
appropriate radio button in the Go to the timestamp box.
If you are searching forward in the buffer, you usually want to choose the On or After option. If you choose
the On or Before option, it may be that the analyzer finishes the search and not move from the current byte,
if that byte happens to be the closest match.
When you select Absolute as Search for, the radio buttons are On or before the specified time or On
or after the specified time. When you select Relative as Search for, the radio buttons are On or before
the specified time relative to the first selected item or On or after the specified time relative to
the last selected item.
1. Select On or before the specified time or On or after the specified time.
2. When you have specified the time interval you want to use, click on the Go To,Move Forward or
Move Backward buttons to start the search from the current event.
When you select Absolute as Search for,Go To is available. When you select Relative as Search
for,Move Forward or Move Backwardis available.
There are a couple of other concepts to understand in respect to searching with timestamps.
lThe analyzer skips some special events that do not have timestamps, such as frame markers. Data events
that do not have timestamps because timestamping was turned off either before or during capture are
also skipped.
lTimestamping can be turned on and off while data is being captured. As a result, the capture buffer may
have some data with a timestamp, and some data without. When doing a search by timestamp, the
analyzer ignores all data without a timestamp.
lThe raw timestamp value is the number of 100-nanosecond intervals since the beginning of January 1,
1601. This is standard Windows time.
5.1.4 Using Go To
Searching with Go To allows you to go to a particular frame or event, or to move through the data X number
of events or frames at a time. You can move either forward or backwards through the data.
To access the Go To function:
1. Open a capture fileto search.
2. Open the Event Display or Frame Display window.
3. Click on the Find icon or choose Find from the Edit menu.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 151
Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. Event Numbering
4. Click on the Go To tab of the Find dialog.
5. The system displays the Find dialog with the Go To tab selected.
Note: The tabs displayed on the Find dialog depend on the product you are running and
the content of the capture file you are viewing.
Figure 5.7 - Find Go To tab
To go to a particular frame :
1. Select the Frame Number radio button
2. Type the frame number in the box.
3. Click the Go To button.
4. To move forward or backward a set number of frames, type in the number of frames you want to
move
5. Then click the Move Forward or Move Back button.
To go to a particular event :
1. Select the Data Event Number or All Events Number radio button.
2. Type the number of the event in the box.
3. Click the Go To button.
4. To move forward or backwards through the data, type in the number of events that you want to move
each time.
5. Then click on the Move Forward or Move Backward button.
6. For example, to move forward 10 events, type the number 10 in the box, and then click on Move
Forward. Each time you click on Move Forward, Frontline moves forward 10 events.
See Event Numbering for why the Data Event Number and All Events Number may be different. As a
general rule, if you have the Show All Events icon depressed on the Event Display window or Frame
Display Event pane, choose All Events Number. If the Show All Events button is up, choose Data
Event Number.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data
152 Frontline BPA low energy Hardware & Software User Manual
Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. List of all Event Symbols on gage 139
5.1.5 Searching for Special Events
Frontline inserts or marks events other than data bytes in the data stream. For example, the analyzer inserts
start-of-frame and end-of-frame markers into framed data, marking where each frame begins and ends. If a
hardware error occurs, the analyzer shows this using a special event marker. You can use Find to locate single
or multiple special events.
To access the search for special events function:
1. Open a capture fileto search.
2. Open the Event Display or Frame Display window.
3. Click on the Find icon or choose Find from the Edit menu.
4. Click on the Special Events tab of the Find dialog.
Note: The tabs displayed on the Find dialog depend on the product you are running
and the content of the capture file you are viewing.
Figure 5.8 - Find Special Events tab
5. Check the event or events you want to look for in the list of special events. Use Check All or
Uncheck All buttons to make your selections more efficient.
6. Click Find Next and Find Previous to move to the next instance of the event.
Not all special events are relevant to all types of data. For example, control signal changes are relevant only to
serial data and not to Ethernet data.
For a list of all special events and their meanings, see List of all Event Symbols on page 139.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 153
P E] on Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. am PM v... Ea'n Spa-0mm 5w W Sudflue'vmm 137-":de Ocular-animus. QM memmd Curtain-0“!” Qua-um wmdbu Exam Emz Elea gym:
5.1.6 Searching by Signal
Searching with Signal allows you to search for changes in control signal states for one or more control signals.
You can also search for a specific state involving one or more control signals, with the option to ignore those
control signals whose states you don’t care about.
The analyzer takes the current selected byte as its initial condition when running searches that rely on finding
events where control signals changed.
To access the search by time function:
1. Open a capture fileto search.
2. Open the Event Display or Frame Display window.
3. Click on the Find icon or choose Find from the Edit menu.
4. Click on the Signal tab of the Find dialog.
Note: The tabs displayed on the Find dialog depend on the product you are running and the
content of the capture file you are viewing.
Figure 5.9 - Find Signal tab.
You will choose one qualifier—Searching for event where, then choose one or more control signals
Control Signals
The section with the check boxes allows you to specify which control signals the analyzer should pay attention
to when doing the search. The analyzer pays attention to any control signal with a check mark.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data
154 Frontline BPA low energy Hardware & Software User Manual
Clxck here to learn more about the Breakout Box and Pins 1 - 4.
lClick on a box to place a check mark next to a control signal
lClick again to uncheck the box
lBy default, the analyzer searches all control signals, which means all boxes start out checked.
For example, if you are only interested in finding changes in RTS and CTS, you would check those two
boxes and uncheck all the other boxes. This tells the analyzer to look only at the RTS and CTS lines when
running the search. The other signals are ignored.
The control signals types include:
lUSB - Pin 1
lUSB - Pin 2
lUSB - Pin 3
lUSB - Pin 4
Click here to learn more about the Breakout Box and Pins 1 - 4.
Searching for event where:
lThe first three options are all fairly similar, and are described together. These options are searching for an
event where:
oOne or more control signals changed
oOne or more control signals changed from off to on
oOne or more control signals changed from on to off
lSearching for an event where one or more signals changed means that the analyzer looks at every control
signal that you checked, and see if any one of those signals changed state at any time.
oIf you want to look at just one control signal:
nCheck the box for the signal.
nUncheck all the other boxes.
nChoose to search for an event where one or more signals changed.
nThe analyzer notes the state of the selected signal at the point in the buffer where the cursor
is, search the buffer, and stop when it finds an event where RTS changed state.
nIf the end of the buffer is reached before an event is found, the analyzer tells you that no
matches were found.
lSearching for events where control signals changed state from off to on, or vice versa, is most useful if the
signals are usually in one state, and you want to search for occasions where they changed state.
For example:
oIf DTR is supposed to be on all the time but you suspect that DTR is being dropped
oTell the analyzer to look only at DTR by checking the DTR box and unchecking the others
oDo a search for where one or more control signals changed from on to off.
oThe analyzer would search the DTR signal and stop at the first event where DTR dropped from on
to off.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 155
,0 El an Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing.
lSearching for an Exact State
To search for an exact state means that the analyzer finds events that match exactly the state of the
control signals that you specify.
oFirst, choose to search for an event where your choices exactly describe the state.
oThis changes the normal check boxes to a series of radio buttons labeled On, Off and Don’t Care for
each control signal.
oChoose which state you want each control signal to be in.
oChoose Don’t Care to have the analyzer ignore the state of a control signal.
oWhen you click Find Next, the analyzer searches for an event that exactly matches the conditions
selected, beginning from the currently selected event.
oIf the end of the buffer is reached before a match is found, the analyzer asks you if you want to
continue searching from the beginning.
oIf you want to be sure to search the entire buffer, place your cursor on the first event in the
buffer.
oSelect one of the four radio buttons to choose the condition that must be met in the search
oSelect one or more of the checkboxes for Pin 1, 2, 3, or 4.
oClick Find Next to locate the next occurrence of the search criteria or Find Previous to locate
an earlier occurrence of the search criteria.
5.1.7 Searching for Data Errors
The analyzer can search for several types of data errors. Searching for data error sallows you to choose which
errors you want to search for and whether to search the DTE or DCE data or both. Bytes with errors are
shown in red in the Event Display window, making it easy to find errors visually when looking through the
data.
To access the search by time function:
1. Open a capture fileto search.
2. Open the Event Display or Frame Display window.
3. Click on the Find icon or choose Find from the Edit menu.
4. Click on the Errors tab of the Find dialog.
Note: The tabs displayed on the Find dialog depend on the product you are running and the
content of the capture file you are viewing.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data
156 Frontline BPA low energy Hardware & Software User Manual
o WVBDASM Decade \ pane," | Me | sum spama‘gvmq sum Wm,“ 52m rm event wheve 3'! an: m we a» m: changzd r \ Dre m Mme ar these Downed an: m we a» mm W a» , W m: many 5 assumes the stale M Resewem , data augn 1 [ ' 'ng Sme Resmchan fizavch mm vzgavd m 6 fizavch m‘y mm :‘dzx a Save E Mm,
Figure 5.10 - Find Error tab.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 157
Searching for event where
The first three options are all fairly similar, and are described together. These options are searching for an
event where:
lone or more error conditions changed
lone or more error conditions occurred
lone or more error conditions were off (i.e. no errors occurred)
Selecting Which Errors to Search
The section with the check boxes allows you to choose which errors the analyzer should look for. Click on a
box to check or un-check it.
If you want to search only for overrun errors
lcheck the box if shown
lun-check the other boxes.
To search for all types of errors
lcheck all boxes
The most common search is looking for a few scattered errors in otherwise clean data.
To do this type of search:
lchoose to Search for an event where one or more error conditions occurred
lchoose which errors to look for
lBy default, the analyzer looks for all types of errors.
In contrast, searching for an event where one or more error conditions were off means that the analyzer
looks for an event where the errors were not present.
For example, if you have data that is full of framing errors, and you know that somewhere in your 20
megabyte capture file the framing got straightened out, you could choose to search for an event where one
or more error conditions were off, and choose to search only for framing. The analyzer searches the file, and
finds the point at which framing errors stopped occurring.
Searching for an event where the error conditions changed means that the analyzer searches the data and
stop at every point where the error condition changed from on to off, or off to on.
For example, if you have data where sometimes the framing is wrong and sometimes right, you would choose
to search framing errors where the error condition changed. This first takes you to the point where the
framing errors stopped occurring. When you click Find Next, the analyzer stops at the point when the errors
began occurring again. Clicking Find Previous will search backwards from the current postion.
The analyzer takes the current selected byte as its initial condition when running searches that rely on finding
events where error conditions changed. The analyzer searches until it finds an event where error conditions
changed or it reaches the end of the buffer, at which point the analyzer tells you that there are no more
events found in the buffer. If you are searching for an exact match, the analyzer asks you if you want to
continue searching from the beginning of the buffer.
Searching for Exact Error Conditions
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data
158 Frontline BPA low energy Hardware & Software User Manual
gnu-Imma- Decode Palmn TIM GnTn SpedalEvenk Elm Search In mm where v“ Elna at more at these changad mix may scrim: if: till: un Dll Dan'lEare Hmwm G r‘ t‘ Smefiemidim ,7‘ Search wtlhwullagad to data origin {9‘ Saudi mtv WM Side: B Slave D Mama bookmarks
To search for an exact state means that
the analyzer finds events that exactly
match the error conditions that you
specify.
lSelect the This exactly describes
the state radio button.
lThis changes the normal check boxes
to a series of radio buttons labeled
On,Off and Don’t Care for each
error.
oOn means that the error
occurred
oOff means that the error did not
occur
oDon’t Care means that the
analyzer ignores that error
condition.
lSelect the appropriate state for each type of error.
Example:
If you need to find an event where just an overrun error occurred, but not any other type of error, you would
choose overrun error to be On, and set all other errors to Off. This causes the analyzer to look for an event
where only an overrun error occurred.
If you want to look for events where overrun errors occurred, and other errors may have also occurred but it
really doesn’t matter if they did or not, choose overrun to be On, and set the others to Don’t Care. The
analyzer ignores any other type of error, and find events where overrun errors occurred.
To find the next error, click the Find Next button. To find an error that occurred earlier in the buffer to where
you are, click the Find Previous button.
5.1.8 Find - Bookmarks
Searching with Bookmarks allows you search on specific bookmarks on the data in Frame Display and
Event Display window. Bookmarks are notes/reminders of interest that you attach to the data so they can
be accessed later.
To access the search for bookmarks
1. Open a capture fileto search.
2. Open the Event Display or Frame Display window.
3. Click on the Find icon or choose Find from the Edit menu.
4. Click on the Bookmarks tab of the Find dialog.
Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the
capture file you are viewing.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 159
‘ hnzx H)ani-["ml|-v [CVIVentDisplay] ' Select unoffset 2
Figure 5.11 - Find Bookmark tab.
There are several ways to locate bookmarks.
lSelect the bookmark you want to move to and click the Go To button.
lSimply double-click on the bookmark.
lClick the Move Forward and Move Back buttons to move through the frames to the bookmarks shown
in the window. When the bookmark is found it is highlighted in the window.
There are three ways to modify bookmarks:
1. Click on Delete to remove the selected bookmark.
2. Click on Modify... to change the selected Bookmark name.
3. Remove All will delete all bookmarks in the window.
The Find window Bookmark tab will also appear when using functions other than Find such as when
clicking on the Display All Bookmarks icon.
5.1.9 Changing Where the Search Lands
When doing a search in the analyzer, the byte or bytes matching the search criteria are highlighted in the
Event Display. The first selected byte appears on the third line of the display.
To change the line on which the first selected byte appears:
1. Open fts.ini (located in the C:\User\Public\Public Documents\Frontline
Test Equipment\)
2. Go to the [CVEventDisplay] section
3. Change the value for SelectionOffset.
4. If you want the selection to land on the top line of the display, change the SelectionOffset to 0 (zero).
5.1.10 Subtleties of Timestamp Searching
Timestamping can be turned on and off while data is being captured. As a result, the capture buffer may have
some data with a timestamp, and some data without. When doing a search by timestamp, the analyzer ignores
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data
160 Frontline BPA low energy Hardware & Software User Manual
Note: The raw timestamp value is the number of 100-nanosecond inteNaIs since the beginning of January 1, 1601. This is standard Windows time. I run-I can-a E-ovm no no no Sam no up in I u 2 we > z x m n 54 DD 00’00 DU 00 21 n -_ oo 15 oo 45 oo oo 47 create modifl .cfa file. Find move .cfa file. na- mmmu wanna: (mum in...» " Imam" 25‘ mmmuzs ups/mums. urn/2171011251 locate and
all data without a timestamp.
Note: The raw timestamp value is the number of 100-nanosecond intervals since the
beginning of January 1, 1601. This is standard Windows time.
5.2 Bookmarks
Bookmarks are electronic sticky notes that you attach to frames of interest so they can be easily found later.
In Frame Display bookmarked frames appear with a magenta triangle icon next to them.
Figure 5.12 - Bookmarked Frame (3) in the Frame Display
In the Event Display bookmarks appear as a dashed line around the start of frame
marker.
Bookmarks are easy to create and maintain, and are a very valuable tool for data
analysis. When you create or modify a bookmark, you have up to 84 characters to
explain a problem, leave yourself a reminder, leave someone else a reminder, etc. Once you create a
bookmark it will be saved with the rest of the data in the .cfa file. When you open a .cfa file, the bookmarks
are available to you.
Once you have created a bookmark, you can use the Find function or other navigation methods to locate and
move among them.
5.2.1 Adding, Modifying or Deleting a Bookmark
You can add, modify, or delete a bookmarks from Frame Display and Event Display
Add:
1. Select the frame or event you want to bookmark.
2. There are three ways to access the Add Bookmark dialog.
a. Select Add or Modify Bookmark from the Bookmarks menu on the Frame Display and
Event Display,
b. Select the Add or Modify Bookmark icon on one of the toolbars, or
c. Right-click on the frame/event and choosing Add Bookmark….
3. In the dialog box, add a comment (up to 84 characters) in the text box to identify the bookmark.
4. Click OK.
Once you create a bookmark it will be saved with the rest of the data in the .cfa file. When you open a .cfa
file, the bookmarks are available to you.
Modify
1. Select the frame or event with the bookmark to be edited.
2. There are three ways to access the Add/Modfy Bookmark dialog.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 161
ark m .cfa file. ark m
a. Select Add or Modify Bookmark from the Bookmarks menu on the Frame Display and
Event Display'
b. Select the Add or Modify Bookmark icon on one of the toolbars, or
c. Right-click on the frame/event and choosing Modify Bookmark… on the selection.
3. Change the comment in the dialog box
4. Click OK. The edited bookmark will be saved as a part of the .cfa file.
5. You can also select Display All Bookmarks from the Frame Display and Event Display
toolbar or the Bookmarks menu. the Find window will open on the Bookmark tab. Select the
bookmark you want to modify and click the Modify… button. Change the comment in the dialog box,
and click OK.
Delete
1. Select the frame or event with the bookmark to be deleted.
2. There are three ways to access the Add/Modfy Bookmark dialog.
a. Select Add or Modify Bookmark from the Bookmarks menu on the Frame Display and
Event Display,
b. Select the Add or Modify Bookmark icon on one of the toolbars, or
c. Right-click on the frame/event and choosing Modify Bookmark… on the selection.
3. Click on the Delete button. The bookmark will be deleted.
4. You can also select Display All Bookmarks from the Frame Display and Event Display
toolbar or the Bookmarks menu. the Find window will open on the Bookmark tab. Select the
bookmark you want to delete and click the Delete button.
5.2.2 Displaying All and Moving Between Bookmarks
There are three ways to move between bookmarks.
1. Press the F2 key to move to the next frame or event with a bookmark.
2. Select Go to Next Bookmark from the Bookmarks menu.
3. Click the Display All Bookmarks icon . Select the bookmark you want to move to and click the Go
To button, or simply double-click on the bookmark. Click the Move Forward and Move Back buttons to
cycle through the bookmarks.
TELEDYNE LECROY Chapter 5 Navigating and Searching the Data
162 Frontline BPA low energy Hardware & Software User Manual
0 Inn] than! made “mum 0‘ ('la Dumb PM In. En'n Spun-(Em: Em: 9w Funnel] sum] Imamnizosvszsmm Wort ; ”m ‘J“‘FJI um
Figure 5.13 - Find Window Bookmark tab Used to Move Around With Bookmarks
To delete a bookmark, select it and click the Delete button.
To modify a bookmark, select it and click the Modify button.
Click Remove All to delete all the bookmarks.
Chapter 5 Navigating and Searching the Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 163
TELEDVNE LECROY Everywhereyoulook‘ Click here to see those settings. Click here to see how to capture data to disk. Click here to learn more about selecting Save options from System Settings. J0 @[ EVEE
Chapter 6 Saving and Importing Data
6.1 Saving Your Data
You can save all or part of the data that you have captured. You can also load a previously saved capture file, and
save a portion of that file to another file. This feature is useful if someone else needs to see only a portion of the
data in your capture file.
On the Control window toolbar you can set up to capture a single file. Click here to see those settings.
There are two ways to save portions or all of the data collected during a data capture. Click here to see how to
capture data to disk.
6.1.1 Saving the Entire Capture File
This option is only available when you select Single File from the Capture Mode on System Settings. Click
here to learn more about selecting Save options from System Settings.
1. If you are capturing data, click on the Stop Capture icon to stop data capture. You cannot save data to
file while it is being captured.
2. Open the Event Display or Frame Display window.
3. Click the Save icon, or select Save from the File menu.
Frontline BPA low energy Hardware & Software User Manual 164
mmmxmu .mp3.“ mmmmmw Irwin-Jun [In Ont-n- “ (gm 0:.» (9m :1“- A: ifiim“ a mu- vlhdulvflnh II'IHI
Figure 6.1 - Windows Save dialog
4. Type a file name in the File name box at the bottom of the screen.
5. Browse to select a specific directory. Otherwise your file is saved in the default capture file directory.
6. When you are finished, click OK.
6.1.2 Saving the Entire Capture File with Save Selection
1. If you are capturing data, click on the Stop icon to stop data capture. You cannot save data to file while
it is being captured.
2. Open the Event Display or Frame Display window.
3. Right click in the data
4. Select Save Selection or Save As from the right click
menu.
5. Click on the radio button labeled Entire File.
6. Choose to save Events or Frames . Choosing to save
Events saves the entire contents of the capture file.
Choosing to save Frames does not save all events in the
capture file.
7. Type a file name in the As box at the bottom of the screen.
Click the Browse icon to browse to a specific directory.
Otherwise your file is saved in the default capture file
directory.
8. When you are finished, click OK.
TELEDYNE LECROY Chapter 6 Saving and Importing Data
165 Frontline BPA low energy Hardware & Software User Manual
(Bookmarks
6.1.3 Saving a Portion of a Capture File
1. If you are capturing data, click on the Stop icon to pause data capture. You cannot save data to a file
while it is being captured.
2. Open the Event Display or Frame Display window, depending on whether you want to
specify a range in bytes or in frames.
3. Select the portion of the data that you want to save. Click and drag to select data, or click on the first item,
move to the last item and Shift+Click to select the entire range, or use the Shift key with the keyboard
arrows or the navigation icons in the Frame Display toolbar. If the range you want to save is too large to
select, note the numbers of the first and last item in the range.
4. Right click in the data
5. Select Save Selection or Save As from the right click
menu
6. Click on the radio button labeled Selection. If you selected
a range, make sure the starting and ending numbers are
correct. To specify a range, type the numbers of the first
and last items in the range in the boxes.
7. Select either Events or Frames to indicate whether the
numbers are event or frame numbers.
8. Type a file name in the As box at the bottom of the screen.
Click the Browse icon to browse to a specific directory.
Otherwise your file is saved in the default capture file
directory.
9. Click OK when you are finished.
6.2 Adding Comments to a Capture File
The Notes feature allows you to add comments to a CFA file. These comments can be used for many purposes.
For example, you can list the setup used to create the capture file, record why the file is useful to keep, or include
notes to another person detailing which frames to look at and why. (Bookmarks are another useful way to record
information about individual frames.)
To open the Notes window :
1. Click the Show Notes icon . This icon is present on the toolbars of the Frame Display , as well
as the Event Display .Notes can be selected from the Edit menu on one of these windows.
Chapter 6 Saving and Importing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 166
Confirming Capture File lCFA) Changes Notes bookmarks
2. Type your comments in the large edit box on the Notes window. The Cut,Copy,Paste features are
supported from Edit menu and the toolbar when text is selected. Undo and Redo features
are all supported from Edit menu and the toolbar at the current cursor location.
3. Click the thumbtack icon to keep the Notes window on top of any other windows.
4. When you're done adding comments, close the window.
5. When you close the capture file, you are asked to confirm the changes to the capture file. See Confirming
Capture File (CFA) Changes for more information.
6.3 Confirm Capture File (CFA) Changes
This dialog appears when you close a capture file after changing the Notes, the protocol stack, or bookmarks. The
dialog lists information that was added or changed and allows you to select which information to save, and
whether to save it to the current file or to a new one.
Changes made to the file appear in a list in the left pane. You can click on each item to see details in the right pane
about what was changed for each item. You simply check the boxes next to the changes you want to keep. Once
you decide what changes to keep, select one of the following:
lSave To This File – Saves the changes you have made to the current capture file.
lSave As – Saves the changes to a new file.
lCancel the Close Operation – Closes the file and returns you back to the display. No changes are saved.
lDiscard Changes – Closes the file without saving any of the changes made to the notes, bookmarks, or
protocol stack.
6.4 Loading and Importing a Capture File
6.4.1 Loading a Capture File
From the Control Window:
1. Go to the File menu.
2. Choose a file from the recently used file list.
3. If the file is not in the File menu list, select Open Capture File from the File menu or simply click on the
Open icon on the toolbar.
4. Capture files have a .cfa extension. Browse if necessary to find your capture file.
5. Click on your file, and then click Open.
TELEDYNE LECROY Chapter 6 Saving and Importing Data
167 Frontline BPA low energy Hardware & Software User Manual
save the file Protoco‘ Stack Reframe DOS timestam 95 DOS txmestamps htt /www.fa s.or rfcs/rfc1761.htm\. Merlm Fi‘es System Settings Techmcal Support Fi‘e Formatfor
6.4.2 Importing Capture Files
1. From the Control window , go to the File menu and select Open Capture File or click on the Open
icon on the toolbar.
2. Left of the File name text box, select from the drop-down list Supported File Types box to All
Importable File Types or All Supported File Types (*.cfa, *.log, *.txt, *.csv, *.cap). Select the file
and click Open.
The analyzer automatically converts the file to the analyzer's format while keeping the original file in its original
format. You can save the file in the analyzer's format, close the file without saving it in the analyzer's format, or
have the analyzer automatically save the file in the analyzer's format (see the System Settings to set this option).
All of these options keep your original file untouched.
When you first open the file, the analyzer brings up the Protocol Stack window and ask you what protocol
decodes, if any, you want to use. You must choose a protocol decode at this point for the analyzer to decode the
data in the file. If you open a file without using any decodes, and decide later that you want to apply a decode,
choose Reframe from the File menu on the Control window.
At present, the analyzer supports the following file types:
lFrontline Serialtest* Async and Serialtest ComProbe®for DOS – requires the .byt for data and the .tim for
timestamps (see note on importing DOS timestamps).
lGreenleaf ViewComm* 3.0 for DOS - requires the .byt for data and the .tim for timestamps (see note on
importing DOS timestamps).
lFrontline Ethertest* for DOS – requires 3 files: filename.cap, filename.ca0 and filename.ca1.
lSniffer Type 1 – supports files with the .enc extension. Does not support Sniffer files with a .cap extension.
lSnoop or Sun Snoop – files with a .cap extension based on RFC 1761. For file format, see
http://www.faqs.org/rfcs/rfc1761.html.
lShomiti Surveyor files in Snoop format – files with a .cap extension. For file format, contact Technical Support.
lCATC Merlin - files with a .csv extension. Files must be exported with a specific format. See File Format for
Merlin Files for information.
lCATC Chief - files with a .txt extension.
6.5 Printing
6.5.1 Printing from the Frame Display/HTML Export
The Frame Display Print dialog and the Frame Display HTML Export are very similar. This topic discusses
both dialogs.
Frame Display Print
The Frame Display Print feature provides the user with the option to print the capture buffer or the current
selection. The maximum file size, however, that can be exported is 1000 frames.
When Print Preview is selected, the output displays in a browser print preview window, where the user can
select from the standard print options. The output file format is in html, and uses the Microsoft Web Browser
Control print options for background colors and images.
Chapter 6 Saving and Importing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 168
mm: Dupldy 1mm memmmmmwmw Vv-chdv Dev-150mm Elsa-m Quomm x Oll'vw Oswww mm mp , 302w 5w @sw auzux A20? AMP MW w. Fvune am Emit“. Nut Bmmmmumuan Macadam Hlbloflh ”(E
Print Background Colors Using Internet Explorer
1. Open the Tools menu on the browser menu bar
2. Select “Internet Options…” menu entry.
3. Click Advanced tab.
4. Check “Print background colors and images” under the Printing section
5. Click the Apply button, then click OK
Configure the Print File Range in the Frame Display Print Dialog
Selecting more than one frame in the Frame Display window defaults the radio button in the Frame Display Print
dialog to Selection and allows the user to choose the All radio button. When only one frame is selected, the All
radio button in the Frame Display Print dialog is selected.
How to Print Frame Display Data
1. Select Print or Print Preview from the File menu on the Frame Display window to display the Frame
Display Print dialog. Select Print if you just want to print your data to your default printer. Select Print
Preview if you want access to printer options.
2. Choose to include the Summary pane (check the box) in the print output. The Summary pane appears at
the beginning of the printed output in tabular format. If you select All layers in the Detail Section, the
Data Bytes option becomes available.
3. In the Detail Section, choose to exclude—No decode section—the decode from the Detail pane in
the Frame Display, or include All Layers or Selected Layers Only. If you choose to include selected
layers, then select (click on and highlight) the layers from the list box.
4. Click on selected layers in the list to de-select, or click the Reset Selected Layers button to de-select all
selected layers.
Figure 6.2 - Frame Display Print Dialog
TELEDYNE LECROY Chapter 6 Saving and Importing Data
169 Frontline BPA low energy Hardware & Software User Manual
Fume Dlxplly Print Preview valde nmmahnn In HD1111 data mm the cunml‘y xe‘eclzdlfllzv lab Inchnde Deni 59mm may Nu defied: seclnn D but. Byte: AI m" Sdnmd layer: an» Flams Huge SIM Aapluxm A“ SIP Sammy. SW? 5th new; We Hui Th- sum»: may Nola vaem'mawm: may allecl meme any way badmvwnd is Furled See He‘v Va! W9
5. Select the range of frames to include All or Selection in the Frame Range section of the Frame
Display Print dialog.
Choosing All prints up to 1000 frames from the buffer.
Choosing Selection prints only the frames you select in the Frame Display window.
6. Selecting the Delete File deletes the temporary html file that was used during printing
7. Click the OK button.
Frame Display Print Preview
The Frame Display Print Preview feature provides the user with the option to export the capture buffer to an
.html file. The maximum file size, however, that can be exported is 1000 frames.
If you chose Print Preview, the system displays your data in a browser print preview display with options for
printing such as page orientation and paper size. You can also use your Printer Preferences dialog to make some
of these selections. When printing your data, the analyzer creates an html file and prints the path to the file at the
bottom of the page. This file can be opened in your browser, however, it may appear different than the printed
version.
1. Select Print Preview from the File menu on the Frame Display window to display the Frame Display
Print Preview.
Figure 6.3 - Frame Display Print Preview Dialog
2. From this point the procedure is the same as steps 2 through 5 in "How to Print Frame Display Data" above.
3. Click the OK button, and after a brief wait a browser window will appear.
Chapter 6 Saving and Importing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 170
About Event splax Note: In order to prevent a Print crash, you cannot select All if there are more than 100,000 events in the capture buffer. Note: See "Configure the Print File Range in the Event Display Print Dialog" above for an explanation of these selections
6.5.2 Printing from the Event Display
The Event Display Print feature provides the user with the option to print either the entire capture buffer or the
current selection. When Print Preview is selected, the output displays in a browser print preview window where
the user can select from the standard print options. The output file format is in html, and uses the Microsoft Web
Browser Control print options for background colors and images (see below).
Print Background Colors Using Internet Explorer
1. Open the Tools menu on the browser menu bar
2. Select “Internet Options…” menu entry.
3. Click Advanced tab.
4. Check “Print background colors and images” under the Printing section
5. Click the Apply button, then click OK
The Event Display Print feature uses the current format of the Event Display as specified by the user.
See About Event Display for an explanation on formatting the Event Display prior to initiating the print feature.
Configure the Print File Range in the Event Display Print dialog
Selecting more than one event in the Event Display window defaults the radio button in the Event Display
Print dialog to Selection and allows the user to choose the All radio button. When only one event is selected ,
the All radio button in the Event Display Print dialog is selected.
How to Print Event Display Data to a Browser
1. Select Print or Print Preview from the File menu on the Event Display window to display the Event
Display Print dialog. Select Print if you just want to print your data to your default printer. Select Print
Preview if you want preview the print in your browser.
2. Select the range of events to include from either All or Selection in the Event Range section . Choosing
All prints all of the events in the capture file or buffer. Choosing Selection prints only the selected events
in the Event Display window.
Note: In order to prevent a Print crash, you cannot select All if there are more than
100,000 events in the capture buffer.
Note: See "Configure the Print File Range in the Event Display Print Dialog" above for
an explanation of these selections
TELEDYNE LECROY Chapter 6 Saving and Importing Data
171 Frontline BPA low energy Hardware & Software User Manual
rm“ Display mm {Vailuwe OM @s-ham not BMMWMMM" g.mamamna SuNIblnmh "E
Figure 6.4 - Event Display Print Dialog
3. Click the OK button.
If you chose Print Preview, the system displays your data in a browser print preview display with options for
printing such as page orientation and paper size. You can also use your Printer Preferences dialog to make some
of these selections. When printing your data, the analyzer creates an html file and prints the path to the file at the
bottom of the page. This file can be opened in your browser, however, it may appear different than the printed
version.
6.6 Exporting
6.6.1 Frame Display Export
You can dump the contents of the Summary pane on the Frame Display into a Comma Separated File (.csv).
To access this feature:
1. Right click on the Summary pane or open the Frame Display File menu.
2. Select the Export… menu item.
3. Select a storage location and enter a File name.
4. Select Save.
6.6.2 Exporting a File with Event Display Export
With the Event Display Export dialog you can export the contents of the Event Display dialog as a test (.txt),
CSV (.csv.), HTML (.htm), or Binary File (.bin). You also have the option of exporting the entire capture buffer or
just the current selection of the Event Display dialog.
Chapter 6 Saving and Importing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 172
mu mphynpn Harlem: fiWsevsznlhe\Dud
Figure 6.5 - Event Display Export Example: .csv file.
How to Export Event Display Data to a File
1. Select Export Events from the File menu on the Event Display window to display the Event Display
Export dialog.
2. Enter a file path and name, or click the browser button to display the Windows Save As dialog and
navigate to the desired storage location.
3. Select a file type from the Save as type: drop-down List Menu on the Event Display Export dialog.
Select from among the following file formats:
Text File (*.txt)
CSV File (*.csv)
HTML File (*.html)
Binary File (*.bin)
4. Select the range of events to include in the file from either All or Selection in the Event Range section
of the Event Display Export dialog.
lSelecting more than one event in the Event Display window defaults the radio button in the Event
Display Export dialog to Selection and allows the user to choose the All radio button.
lWhen only one event is selected (something must be selected), the All radio button in the Event
Display Export dialog is selected by default.
5. Next you need to select the Side variable for serial communications.
lis used to determine whether you want to export data from , or both.
lChoose Host, Function\Control or Both to determine how you want to export the data.
5. Choose Host, Function\Control or Both to determine how you want to export the data.
6. Choose whether you want to display multiple events or single events per row.
TELEDYNE LECROY Chapter 6 Saving and Importing Data
173 Frontline BPA low energy Hardware & Software User Manual
Note: The raw timestamp value is me number of 100-nanosecond intervals sxnce the begxnning of January 1, 1601. Thxs is standard Wxndows Mme.
Events Per Row: You can choose to display Multiple Events Per Row, but this method contains no
timestamps. If you select One Event Per Row, you can display timestamps. multiple events or single
events per row.
Note: The raw timestamp value is the number of 100-nanosecond intervals since the
beginning of January 1, 1601. This is standard Windows time.
.
Timestamp
Delta
Event Number
Byte Number
Frame Number
Type
Hex
Dec
Oct
Bin
Side
ASCII | 7-bit ASCII | EBCDIC | Baudot
RTS
CTS
DSR
DTR
CD
RI
UART Overrun
Parity Error
Framing Error
7. If you select .csv as the file type, choose whether you want to hide/display Preambles or Column
Headings in the exported file
8. Click Save. The Event Display Export file is saved to the locations you specified in File name.
Chapter 6 Saving and Importing Data TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 174
, “mm m. Mmum "Mummemww m ;m m .m m. mlvw/zmznzomasmw W rm 6» 29m 0 u o o. mmmmmmw mm m m m, n u n n mulw/zmznzomasmw W m m 29m 0 u o o. mum/mummmm mm. m s" m... ,. 152 WWW. mlvw/zmznzomasmw W m 5311 29m 70 112 no 111mm: mmmummmm mm. as m m... ,. 1.. mmm mmmmmmw mm m m m, n u a mu- .aummummwmm m m m... n n u ml mmmmmmw mm m w m, u 7. u m mlvw/mznzomasmw W m as 29m no 11- 200W. mmmmmmw mm m as m, .n m mm w1m21zmmasmvm W 642 W 29m no 11- 200W. mmmnummwm mm. m 5.. m... .1 H. mm.
Figure 6.6 - Example: .csv Event Display Export, Excel spreadsheet
6.6.2.1 Export Filter Out
You can filter out data you don't want or need in your text file.
(This option is available only for serial data.) In the Filter Out box, choose which side to filter out: the DTE data,
the DCE data or neither side (don't filter any data.) For example, if you choose the radio button for DTE data, the
DTE data would be filtered out of your export file and the file would contain only the DCE data.
You can also filter out Special Events (which is everything that is not a data byte, such as control signal changes and
Set I/O events), Non-printable characters or both. If you choose to filter out Special Events, your export file would
contain only the data bytes. Filtering out the non-printable characters means that your export file would contain
only special events and data bytes classified as printable. In ASCII, printable characters are those with hex values
between $20 and $7e.
6.6.2.2 Exporting Baudot
When exporting Baudot, you need to be able to determine the state of the shift character. In a text export, the
state of the shift bit can be determined by the data in the Character field. When letters is active, the character
field shows letters and vice versa.
TELEDYNE LECROY Chapter 6 Saving and Importing Data
175 Frontline BPA low energy Hardware & Software User Manual
TELEDYNE LECROY
Chapter 7 General Information
7.1 System Settings and Progam Options
7.1.1 System Settings
Open the System Settings window by choosing System Settings from the Options menu on the
Control window. To enable a setting, click in the box next to the setting to place a checkmark in the box. To
disable a setting, click in the box to remove the checkmark. When viewing a capture file, settings related to
data capture are grayed out.
Frontline BPA low energy Hardware & Software User Manual 176
r Systun Smfings Baum Mode: Single we Bearing Captuie File anD Fiie File Size ['n K]. 31979 Restart Capturing After Saving an M W Max “Y Eilanup ‘ mmWMIw-mm. El
Single File
Figure 7.1 - System Settings Single File Mode
This option allows the analyzer to capture data to a file. Each time you capture the file you must provide a file
name. The size of each file cannot larger than the number given in File Size (in K). The name of each file is the
name you give it in the Name box followed by the date and time. The date and time are when the series was
opened.
lRestart Capturing After Saving or Clearing Capture File
If the Automatically Restart feature is enabled, the analyzer restarts capture to the file immediately after
the file is closed.
lWrap File
When enabled, the analyzer wraps the file when it becomes full. The oldest events are moved out of the
file to make room for new events. Any events moved out of the file are lost. When disabled, the analyzer
stops capture when the file becomes full. Either reset the file or close your capture file to continue.
lFile Size: The size of the file will depend of the available hard disk space.
1. Click the Min button to see/set the minimum acceptable value for the file size.
2. Click the Max button to see/set the maximum acceptable value for the file size.
You can accept these values, or you can enter a unique file
size. But if you try to close the dialog after entering a value
greater than the maximum or less than the minimum, you
will see the following dialog.
TELEDYNE LECROY Chapter 7 General Information
177 Frontline BPA low energy Hardware & Software User Manual
Start “E Program Start ”2 Ogtions Advanced Advanced System Options System Settings Startup options Advanuni mi ‘uwwm Advanced system options
lStart up
Opens the Program Start up Options window. Start up options let you choose whether to start data
capture immediately on opening the analyzer.
lAdvanced
Opens the Advanced System Options window. The Advanced Settings should only be changed on advice of
technical support.
7.1.1.1 System Settings - Disabled/Enabled Options
Some of the System Settings options are disabled depending upon the status of the data capture session.
lAs the default, all the options on the System Settings dialog are enabled.
lOnce the user begins to capture data by selecting the Start Capture button, some of the options on the
System Settings dialog are disabled until the user stops data capture and either saves or erases the
captured data.
lThe user can go into the Startup options and Advanced system options on the System Settings dialog
and make changes to the settings at any time.
7.1.1.2 Advanced System Options
These parameters affect fundamental aspects of the software, and it is unlikely that you ever have to change
them. If you do change them and need to return them to their original values, the default value is listed in
parentheses to the right of the value box.
Most technical support problems are not related to these parameters, and as changing them could have
serious consequences for the performance of the analyzer, we strongly recommend contacting technical
support before changing any of these parameters.
To access the Advanced System Options:
1. Go to the Control window.
2. Choose System Settings from the Options menu.
3. On the System Settings window, click the Advanced button.
Figure 7.2 - Advanced System Options dialog
lDriver Receive Buffer Size in Kbytes - This is the size of the buffer used by the driver to store
incoming data. This value is expressed in Kbytes.
Chapter 7 General Information TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 178
Note: This option is currently disabled.
lDriver Action Queue Size In Operating System Pages - This is the size of the buffer used by the
driver to store data to be transmitted. This value is expressed in operating system pages.
lFrame Completion Timeout in Seconds - This is the number of seconds that the analyzer waits to
receive data on a side while in the midst of receiving a frame on that side.
If no data comes in on that side for longer than the specified number of seconds, an "aborted frame"
event is added to the Event Display and the analyzer resumes decoding incoming data. This can occur
when capturing interwoven data (DTE and DCE) and one side stops transmitting in the middle of a frame.
The range for this value is from 0 to 999,999 seconds. Setting it to zero disables the timeout feature.
Note: This option is currently disabled.
7.1.1.3 Selecting Start Up Options
To open this window:
1. Choose System Settings from the Options menu on the Control window.
2. On the System Settings window, click the Start Up button.
3. Choose one of the options to determine if the analyzer starts data capture immediately on starting up
or not.
Figure 7.3 - Start Up Options dialog
lDon't start capturing immediately - This is the default setting. The analyzer begins monitoring data but
does not begin capturing data until clicking the Start Capture icon on the Control,Event Display
or Frame Display windows.
lStart capturing to a file immediately - When the analyzer starts up, it immediately opens a capture
file and begins data capture to it. This is the equivalent of clicking theStart Capture icon. The file is
given a name based on the settings for capturing to a file or series of files in the System Settings
window.
lStart capturing immediately to the following file: - Enter a file name in the box below this option.
When the analyzer starts up, it immediately begins data capture to that file. If the file already exists, the
data in it is overwritten.
7.1.2 Changing Default File Locations
The analyzer saves user files in specific locations by default. Capture files are placed in the My Capture Files
directory and configurations are put in My Configurations. These locations are set at installation.
Follow the steps below to change the default locations.
TELEDYNE LECROY Chapter 7 General Information
179 Frontline BPA low energy Hardware & Software User Manual
File Twas Location My Capbue Flas C:\U sevs\P|bIc\Documents\Fronthe Test qu'xnenfiMy Capture Files\ My Cunfiguau’ons C:\U sers\Pw£c\Ducuments\Fvunthe Test Equ'pmawWy Conliguralions\ My Decade‘s l3:\L| sevs\P|bIc\Documsnt:\anlhe Test qu'xnenfiMy Decodevs\ My Log File: C:\U sevs\P|b§c\Documenls\Fronlhe Test EWWy Log Files\ Mv Methods C:\L| sers\F‘ubIc\Dnc mentflmehe Test Eabmel'flMv Melhudfl 4 www
1. Choose Directories from the Options menu on the Control window to open the File Locations
window.
Figure 7.4 - File Locations dialog
2. Select the default location you wish to change.
3. Click Modify.
4. Browse to a new location.
Figure 7.5 - File Locations Browse dialog
5. Click OK.
6. Click OK when finished.
If a user sets the My Decoders directory such that it is up-directory from an installation path, multiple
instances of a personality entry may be detected, which causes a failure when trying to launch Frontline. For
Chapter 7 General Information TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 180
SideNames Default N ames Ewen! N ames Slave Master
example, if an Frontline product is installed at C:\Users\Public\Public Documents\Frontline Test
Equipment\My Decoders\ then "My Decoders" cannot be set to any of the following:
lC:\ My Decoders\
lC:\Users\ My Decoders\
lC:\Users\\Public\My Decoders\
lC:\Users\Public\Public Documents\My Decoders\
lor to any directory that already exists in the path C:\Users\Public\Public Documents\Frontline Test
Equipment\My Decoders\
Default Capture File Folder Checkbox
If the Use Last Opened Folder for Capture Files checkbox is checked, then the system automatically
changes the default location for saving capture files each time you open a file from or save a file to a new
location. For example, let's say the default location for saving capture files is Drive A > Folder A. Now you
select the Use Last Opened Folder for Capture Files checkbox. The next time, however, you open a
capture file from a different location, Folder B > Removable Flash Drive for example. Now when you save the
capture file, it will be saved to Folder B > Removable Flash Drive. Also, all subsequent files will be saved to that
location. This remains true until you open a file from or save a file to a different location.
There is one caveat to this scenario, however. Let's say you have selected Use Last Opened Folder for
Capture Files and opened a file from a location other than the default directory. All subsequent capture
files will be saved to that location. Suppose, however, the next time you want to save a capture file, the new
file location is not available because the directory structure has changed: a folder has been moved, a drive
has been reassigned, a flash drive has been disconnected, etc. In the case of a "lost" directory structure,
subsequent capture files will be saved to the default location. ComProbe software will always try to save a
file to the folder where the last file was opened from or saved to, if Use Last Opened Folder for
Capture Files is checked. If, however, the location is not accessible, files are saved to the default directory
that is set at installation.
If the checkbox is unchecked, then the system always defaults to the directory listed in the File Locations
dialog.
7.1.3 Side Names
The Side Names dialog is used to change the names of objects and events that appear in various displays.
The Side Names dialog will change depending on the sniffing technology in use at the time the software
was loaded.
Changes to the Names are used throughout the program.
Figure 7.6 - Example: Side Names Where "Slave" and "Master" are current
TELEDYNE LECROY Chapter 7 General Information
181 Frontline BPA low energy Hardware & Software User Manual
tore Timestamps [T his item takes eflect iimedately] Capture Options Stuage Resolution: 050 Miuueeoonds [high reunion] V Note 1: To apply iesolutian changes. you must vestat the pmgiam. Note 2' Finei vesolution: increase the captue llle size Click Help in! male inlurmatiun un how timtanps died system peiloimanee. Display El ptions Display Flaw Timestamp Value [J Display Relative Timestamps Numbet DI digits to display to 47 the right of the decimal point: -
1. To open the Side Names dialog, choose Side Names… from the Options menu on the Control
window.
2. To change a name, click on the name given in the Current Names column, and then click again to
modify the name (a slow double-click).
3. Select OK to initiate the changes. The changes that have been made will not fully take effect for any
views already open. Closing and reopening the views will cause the name change to take effect.
4. To restore the default values, click the Set Defaults button.
7.1.4 Timestamping
Timestamping is the process of precise recording in time of packet arrival. Timestamps is an optional
parameter in the Frame Display and Event Display that can assist in troubleshooting a network link.
7.1.4.1 Timestamping Options
The Timestamping Options window allows you to enable or disable timestamping, and change the resolution
of the timestamps for both capture and display purposes.
To open this window:
Choose Set Timestamp Format… from the Options menu on the Frame Display and Event Display
window or click on the Timestamping Option icon in the Event Display toolbar. The Timestamping
Options window will open.
Figure 7.7 - Timestamping Options dialog
Chapter 7 General Information TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 182
Note: The raw timestamp value is the number of 100-nanosecond intervals since the beginning of January 1, 1601. This is standard Windows time. Store Tlmestamps [T hrs Ilem lakes elfect Immedlalely] Capture Options Storage Flesolutio . U 50 Mrcroseconds [Mr resolutron] Note 1: To apply resolution changes, you must reslart the program. Note 2: Finer resolution: Increase the capture lrle srze. Note: If you change the resolution, you need to exit the analyzer and restart in order for the change to take effect. System Settings ayp
Enabling/Disabling Timestamp
To enable timestamping click to make a check appear in the check box Store Timestamps (This time
takes effect immediately). Removing the check will disable timestamping.
Changing the Timestamp Resolution
This option affects the resolution of the timestamp stored in the capture file. The default timestamp is 10
milliseconds. This value is determined by the operating system and is the smallest "normal" resolutions
possible.
Note: The raw timestamp value is the number of 100-nanosecond intervals since the
beginning of January 1, 1601. This is standard Windows time.
It is also possible to use "high resolution"
timestamping. High resolution
timestamp values are marked by an
asterisk as high resolution in the drop
down list. To change timestamping
resolutions:
1. Go to the Capture Options
section of the window.
2. Change the resolution listed in
the Storage Resolution box.
Note: If you change the resolution, you need to exit the analyzer and restart in
order for the change to take effect.
Performance Issues with High Resolution Timestamp
There are two things to be aware of when using high resolution timestamps. The first is that high resolution
timestamps take up more space in the capture file because more bits are required to store the timestamp.
Also, more timestamps need to be stored than at normal resolutions. The second issue is that using high
resolution timestamping may affect performance on slower machines
For example, if 10 bytes of data are captured in 10 milliseconds at a rate of 1 byte per millisecond, and the
timestamp resolution is 10 milliseconds, then only one timestamp needs to be stored for the 10 bytes of data.
If the resolution is 1 millisecond, then 10 timestamps need to be stored, one for each byte of data. If you have
two capture files, both of the same size, but one was captured using normal resolution timestamping and the
other using high resolution, the normal resolution file has more data events in it, because less room is used to
store timestamps.
You can increase the size of your capture file in the System Settings.
Switching Between Relative and Absolute Time
With Timestamping you can choose to employ Relative Time or Absolute time.
1. Choose System Settings from the Options menu on the Control window, and click the
Timestamping Options button, or click the click the Timestamping Options icon from the
Event Display window.
2. Go to the Display Options section at the bottom of the window and find the Display Relative
Timestamps checkbox.
TELEDYNE LECROY Chapter 7 General Information
183 Frontline BPA low energy Hardware & Software User Manual
Note: The options in this section affect only how the timestamps are displayed on the screen, not how the timestamps are recorded in the capture file. ayp
3. Check the box to switch the display to relative timestamps. Remove the check to return to absolute
timestamps.
Note: The options in this section affect only how the timestamps are displayed on the
screen, not how the timestamps are recorded in the capture file.
lDisplay Raw Timestamp Value shows the timestamp as the total time in hundred nanoseconds from
a specific point in time.
lDisplay Relative Timestamps shows the timestamp as the amount of time that has passed since the
first byte was captured. It works just like a stop watch in that the timestamp for the first byte is
0:00:00.0000 and all subsequent timestamps increment from there. The timestamp is recorded as the
actual time, so you can flip back and forth between relative and actual time as needed.
lSelecting both values displays the total time in nanoseconds from the start of the capture as opposed to a
specific point in time.
lSelecting neither value displays the actual chronological time.
When you select Display Relative Timestamp you can set the number of digits to display using the up or
down arrows on the numeric list.
Displaying Fractions of a Second
1. Choose System Settings from the Options menu on the Control window, and click the
Timestamping Options button, or click the click the Timestamping Options icon from the
Event Display window.
2. Go to the Display Options section at the bottom of the window, and find the Number of Digits to
Display box.
3. Click on the arrows to change the number. You can display between 0 and 6 digits to the right of the
decimal point.
7.2 Technical Information
7.2.1 Performance Notes
As a software-based product, the speed of your computer’s processor affects the analyzer’s performance.
Buffer overflow errors are an indicator that the analyzer is unable to keep up with the data. The information
below describes what happens to the data as it arrives, what the error means, and how various aspects of the
analyzer affect performance. Also included are suggestions on how to improve performance.
The analyzer's driver takes data from the driver and counts each byte as they are put into the driver’s buffer.
The analyzer's driver tells the user interface that data is ready to be processed. The analyzer takes the data
from the driver’s buffer and puts the data into the capture buffer.
Driver Buffer Overflows occur when the user interface does not retrieve frames from the driver quickly
enough. Buffer overflows are indicated in the Event Display window by a plus sign within a circle. Clicking
on the buffer overflow symbol displays how many frames have been lost.
There are several things that you can do to try and solve this problem.
lUse capture filters to filter out data you don't need to see. Capture filters reduce the amount of data
processed by the analyzer. (Ethernet Only)
Chapter 7 General Information TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 184
File Header Packet Record Number 1 Packet Record Number 2 Packet Record Number N Identification Pullem Version Number = 1 Detalink Type Timescamping Options
lClose all other programs that are doing work while the analyzer is running. Refrain from doing searches in
the Event Display window or other processor intensive activities while the analyzer is capturing data.
lTimestamping takes up processor time, primarily not in timestamping the data, but in writing the
timestamp to the file. Try turning off timestamping from the Timestamping Options window.
lFor Driver Buffer Overflows, change the size of the driver buffer. This value is changed from the
Advanced System Settings. Go to the Control window and choose System Settings from the
Options menu. Click on the Advanced button. Find the value Driver Receive Buffer Size in
Operating System Pages. Take the number listed there and double it.
lThe analyzer’s number one priority is capturing data; updating windows is secondary. However, updating
windows still takes a certain amount of processor time, and may cause the analyzer to lose data while the
window is being updated. Some windows require more processing time than others because the
information being displayed in them is constantly changing. Refrain from displaying data live in the Event
Display and Frame Display windows. The analyzer can capture data with no windows other than the
Control window open.
lIf you are still experiencing buffer overflows after trying all of the above options, then you need to use a
faster PC.
7.2.2 BTSnoop File Format
Overview
The BTSnoop file format is suitable for storing Bluetooth® HCI traffic. It closely resembles the snoop format, as
documented in RFC 1761.
File Format
The snoop packet capture file is an array of octets structured as follows:
The File Header is a fixed-length field containing general information about the packet file and the format of
the packet records it contains. One or more variable-length Packet Record fields follow the File Header field.
Each Packet Record field holds the data of one captured packet.
File Header
The structure of the File Header is as follows:
TELEDYNE LECROY Chapter 7 General Information
185 Frontline BPA low energy Hardware & Software User Manual
Original Length Included Langih Packet Flags Cumulllive Drops Timesmmp Microseconds Packet Dam
Identification Pattern:
A 64-bit (8 octet) pattern used to identify the file as a snoop packet capture file. The Identification Pattern
consists of the 8 hexadecimal octets:
62 74 73 6E 6F 6F 70 00
This is the ASCII string "btsnoop" followed by one null octets.
Version Number:
A 32-bit (4 octet) unsigned integer value representing the version of the packet capture file being used. This
document describes version number 1.
Datalink Type:
A 32-bit (4 octet) field identifying the type of datalink header used in the packet records that follow. The
datalink type codes are listed in the table below. Values 0 - 1000 are reserved, to maximize compatibility with
the RFC1761 snoop version 2 format.
Datalink Type Code
Reserved 0 - 1000
Un-encapsulated HCI (H1) 1001
HCI UART (H4) 1002
HCI BSCP 1003
HCI Serial (H5) 1004
Unassigned 1005 - 4294967295
Table 7.1 - Datalink Codes
Packet Record Format
Each packet record holds a partial or complete copy of one packet as well as some descriptive information
about that packet. The packet may be truncated in order to limit the amount of data to be stored in the packet
file.
Each packet record holds 24 octets of descriptive information about the packet, followed by the packet data,
which is variable-length, and an optional pad field. The descriptive information is structured as six 32-bit (4-
octet) integer values.
The structure of the packet record is as follows:
Original Length
Chapter 7 General Information TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 186
A 32-bit unsigned integer representing the length in octets of the captured packet as received via a network.
Included Length
A 32-bit unsigned integer representing the length of the Packet Data field. This is the number of octets of the
captured packet that are included in this packet record. If the received packet was truncated, the Included
Length field is less than the Original Length field.
Packet Flags
Flags specific to this packet. Currently the following flags are defined:
Bit No. Definition
0 Direction flag 0 = Sent, 1 = Received
1 Command flag 0 = Data, 1 = Command/Event
2 - 31 Reserved
Table 7.2 - Packet Flag Description
Bit 0 is the least significant bit of the 32-bit word.
Direction is relative to host / DTE. i.e. for Bluetooth controllers, Send is Host->Controller, Receive is Controller-
>Host.
Note: Some Datalink Types already encode some or all of this information within the Packet Data. With these
Datalink Types, these flags should be treated as informational only, and the value in the Packet Data should
take precedence.
Cumulative Drops
A 32-bit unsigned integer representing the number of packets that were lost by the system that created the
packet file between the first packet record in the file and this one. Packets may be lost because of insufficient
resources in the capturing system, or for other reasons.
Note: some implementations lack the ability to count dropped packets. Those implementations may set the
cumulative drops value to zero.
Timestamp Microseconds
A 64-bit signed integer representing the time of packet arrival, in microseconds since midnight, January 1st, 0
AD nominal Gregorian.
In order to avoid leap-day ambiguity in calculations, note that an equivalent epoch may be used of midnight,
January 1st 2000 AD, which is represented in this field as 0x00E03AB44A676000.
Packet Data
Variable-length field holding the packet that was captured, beginning with its datalink header. The Datalink
Type field of the file header can be used to determine how to decode the datalink header. The length of the
Packet Data field is given in the Included Length field.
Note that the length of this field in not necessarily rounded to any particular multi-octet boundary, as might
otherwise be suggested by the diagram.
Data Format
All integer values are stored in "big-endian" order, with the high-order bits first.
7.2.3 Progress Bars
The analyzer uses progress bars to indicate the progress of a number of different processes. Some progress
bars (such as the filtering progress bar) remain visible, while others are hidden.
TELEDYNE LECROY Chapter 7 General Information
187 Frontline BPA low energy Hardware & Software User Manual
10 x1 :2 :3 ll 15 6 x7 :8 NUL SON SI'X ETX EDT E ACK BEL 35 I YN CAN SP l ‘ ' 3 D I 3 A C 7 G W
The title on the progress bar indicates the process underway.
7.2.4 Event Numbering
This section provides information about how events are numbered when they are first captured and how this
affects the display windows in the analyzer. The information in this section applies to frame numbering as
well.
When the analyzer captures an , it gives the event a number. If the event is a data byte event, it receives a
byte number in addition to an event number. There are usually more events than bytes, with the result is that
a byte might be listed as Event 10 of 16 when viewing all events, and Byte 8 of 11 when viewing only the data
bytes.
The numbers assigned to events that are out of the buffer are not reassigned. In other words, when event
number 1 is wrapped out of the buffer, event number 2 is not renumbered to event 1. This means that the
first event in the buffer may be listed as event 11520 of 16334, because events 1-11519 have been wrapped
out of the buffer. Since row numbers refer to the event numbers, they work the same way. In the above
example, the first row would be listed as 2d00 (which is hex for 11520.)
The advantage of not renumbering events is that you can save a portion of a capture file, send it to a
colleague, and tell your colleague to look at a particular event. Since the events are not renumbered, your
colleague’s file use the same event numbers that your file does.
7.2.5 Useful Character Tables
7.2.5.1 ASCII Codes
Chapter 7 General Information TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 188
HEX lETI'ERS FIGURES on RANK BLANK 0| E 3 In .- FIGLRES FIGURES M X I V 10 ll l2 '3 I? IA :8 :0 ID IE 1F NUL SON 57X ETX VT FF CR SO SI CC CUI ACK L SYN CUB D04
7.2.5.2 Baudot Codes
7.2.5.3 EBCDIC Codes
7.2.5.4 Communication Control Characters
Listed below in alphabetical order are the expanded text meanings for common ANSI communication control
characters, and two-character system abbreviation for each one. Some abbreviations have forward slash
characters between the two letters. This is to differentiate the abbreviations for a control character from a
hex number. For example, the abbreviation for Form Feed is listed as F/F, to differentiate it from the hex
number FF.
TELEDYNE LECROY Chapter 7 General Information
189 Frontline BPA low energy Hardware & Software User Manual
Abbreviation Control Character Text
AK ACK Acknowledge
BL BEL Bell
BS BS Backspace
CN CAN Cancel
CR CR Carriage Return
D/1-4 DC1-4 Device Control 1-4
D/E DEL Delete
DL DLE Data Link Escape
EM EM End of Medium
EQ ENQ Enquiry
ET EOT End of Transmission
E/C ESC Escape
E/B ETB End of Transmission Block
EX ETX End of Text
F/F FF Form Feed
FS FS File Separator
GS GS Group Separator
HT HT Horizontal Tabulation
LF LF Line Feed
NK NAK Negative Acknowledge
NU NUL Null
RS RS Record Separator
SI SI Shift In
SO SO Shift Out
SH SOH Start of Heading
SX STX Start of Text
SB SUB Substitute
SY SYN Synchronous Idle
US US Unit Separator
VT VT Vertical Tabulation
Table 7.3 - Communications Control Characters
7.2.6 DecoderScript Overview
The main purpose of this manual is to describe DecoderScript™, the language used in writing decoders.
DecoderScript allows you to create new decoders or modify existing decoders to expand the functionality of
Chapter 7 General Information TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 190
your ComProbe protocol analyzer. DecoderScript displays protocol data, checks the values of fields, validates
checksums, converts and combines field values for convenient presentation. Decoders can also be
augmented with custom C++-coded functions, called "methods", to extend data formatting, validation,
transformations, and so on.
A decoder defines field-by-field how a protocol message can be taken apart and displayed. The core of each
"decoder" is a program that defines how the protocol data is broken up into fields and displayed in the Frame
Display window of the analyzer software.
This manual provides instruction on how to create and use custom decoders. When reading the manual for
the first time, we encourage you to read the chapters in sequence. The chapters are organized in such a way
to introduce you to DecoderScript writing step- by- step.
Screenshots of the ComProbe protocol analyzer have been included in the manual to illustrate what you see
on your own screen as you develop decoders. But you should be aware for various reasons, the examples
may be slightly different from the ones that you create. The differences could be the result of configuration
differences or because you are running a newer version of the program. Do not worry if an icon seems to be
missing, a font is different, or even if the entire color scheme appears to have changed. The examples are still
valid.
Examples of decoders, methods, and frame recognizers are included in this manual. You can cut and paste
from these examples to create your own decoders.
These files are installed in the FTE directory of the system Common Files directory. The readme file in the
root directory of the protocol analyzer installation contains a complete list of included files. Most files are
located in My Decoders and My Methods.
We will be updating our web site with new and updated utilities, etc, on a regular basis and we urge decoder
writers to check there occasionally.
7.2.7 Bluetooth low energy ATT Decoder Handle Mapping
Low energy device attributes contain a 16-bit address called the attribute handle. Each handle is associated
with an attribute Universally Unique Identifier (UUID) that is 128-bits long. In the attribute database, the
handle is unique while the UUID is not unique.
The ComProbe software detects and stores the relationships (mappings) between handle and UUID during
the GATT discovery process. But sometimes, there is no GATT discovery process because
lThe discovery has previously taken place and both devices stored the mappings and the discovery will not
repeat at every subsequent connection.
lThe developer owns both devices in the conversation and chose to ignore discovery because the
mappings are known.
lThe devices are in development and the code to perform the mappings has not been written yet.
The solution to this problem is to
1. define the mappings in a file and
2. then pre-loading the mapping using the ComProbe software.
Creating handle-UUID mapping file
Create a file named "ATT_Handle_UUID_Preload.ini' in the root directory of "C:\Users\Public\Public
Documents\Frontline Test Equipment\My Decoders\", but the file can be located anywhere.
Assume that you want to create a GATT service starting at handle 1.
Create a section in the ini file called
[Service Base Handles]
TELEDYNE LECROY Chapter 7 General Information
191 Frontline BPA low energy Hardware & Software User Manual
http://fte.cDm/support/suppurtrequestaspx tech_5uppurt@fte.cum fle.com/supgurt/wde px
A=1
"A" will be your first service. Make the base handle equal to the handle of your service. You can use all upper
and lower case letters so you can have up to 52 service handles.
Next add the following section.
[Advertiser Handles]
; Generic Access Profile (GAP)
A0 = 1800
A1 = 2803
A2 = 2a00
A3 = 2803
A4 = 2a01
A5 = 2803
A6 = 2a04
A few things of note:
lIn the code above, lines begging with a semi-colon are comments.
lIf you want to change the base handle of the GAP service, change the "1" to some other number.
lIf you want to comment out the entire service, comment out the base handle. If no "A" is defined, the
software will ignore "A1", "A2" and so on.
Contacting Technical Support
Technical support is available in several ways. The online help system provides answers to many user related
questions. Frontline's website has documentation on common problems, as well as software upgrades and
utilities to use with our products.
On the Web: http://fte.com/support/supportrequest.aspx
Email: tech_support@fte.com
If you need to talk to a technical support representative about your Frontline BPA low energy product,
support is available between 9 am and 5 pm, U.S. Eastern Time zone, and between 9 am and 5 pm, Pacific
Time zone, on Monday through Friday. Technical support is not available on U.S. national holidays.
Phone: +1 (434) 984-4500
Fax: +1 (434) 984-4505
Instructional Videos
Teledyne LeCroy provides a series of videos to assist the user and may answer your questions. These videos
can be accessed at fte.com/support/videos.aspx. On this web page use the Video Filters sidebar to select
instructional videos for your product.
Chapter 7 General Information TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 192
TELEDYNE LECROY Chapter 7 General Information
193 Frontline BPA low energy Hardware & Software User Manual
I ‘ TELEDYNE LECHDY l. Everywhereyoulook'
Appendicies
Appendix A: Application Notes 195
Frontline BPA low energy Hardware & Software User Manual 194
Appendix A: Application Notes
A.1 Decrypting Encrypted Bluetooth® low energy 196
A.2 Bluetooth® low energy Security 204
A.3 Bluetooth Virtual Sniffing 210
TELEDYNE LECROY Appendicies
195 Frontline BPA low energy Hardware & Software User Manual
TELEDYNE LECROY
A.1 Decrypting Encrypted Bluetooth® low energy
A.1.1 How Encryption Works in Bluetooth low energy
Data encryption is used to prevent passive and active—man-in-the-middle (MITM) — eavesdropping attacks
on a Bluetooth low energy link. Encryption is the means to make the data unintelligible to all but the Bluetooth
master and slave devices forming a link. Eavesdropping attacks are directed on the over-the-air transmissions
between the Bluetooth low energy devices, so data encryption is accomplished prior to transmission using a
shared, secret key.
A.1.2 Pairing
ABluetooth low energy device that wants to share secure data with another device must first pair with that
device. The Security Manager Protocol (SMP) carries out the pairing in three phases.
1. The two connected Bluetooth low energy devices announce their input and output capabilities and
from that information determine a suitable method for phase 2.
2. The purpose of this phase is to generate the Short Term Key (STK) used in the third phase to secure
key distribution. The devices agree on a Temporary Key (TK) that along with some random numbers
creates the STK.
3. In this phase each device may distribute to the other device up to three keys:
a. the Long Term Key (LTK) used for Link Layer encryption and authentication,
b. the Connection Signature Resolving Key (CSRK) used for data signing at the ATT layer, and
c. the Identity Resolving Key (IRK) used to generate a private address.
Of primary interest in this paper is the LTK. CSRK and IRK are covered briefly at the end.
Bluetooth low energy uses the same pairing process as Classic Bluetooth: Secure Simple Pairing (SSP). During
SSP initially each device determines its capability for input and output (IO). The input can be None, Yes/No, or
Keyboard with Keyboard having the ability to input a number. The output can be either None or Display with
Display having the ability to display a 6-digit number. For each device in a paring link the IO capability
determines their ability to create encryption shared secret keys.
The Pairing Request message is transmitted from the initiator containing the IO capabilities, authentication
data availability, authentication requirements, key size requirements, and other data. A Pairing Response
Frontline BPA low energy Hardware & Software User Manual 196
d 5MP coon, Puma Rim ID CM: Kwomy ans an. Inn nus human-awn del- «1 mm a man ammo: 3mm mm mm Pvuhechon v.5 MmEMWKEJ/Sm IS nus: a Inn-In Ks; own-mm [Ids] mm madman: UK lowed wzmv nan-u IM Inn-m ma mm. IRK unwed w u «an Sm lnlflm ml mm: CSFIK a Rumor-1a Kw owwm (may Responds! mandamus: UK lolnmedb/EDdefimd 1M amide! ml dalvbulelRK Vulwaed mum sm Rainer-1m anal mm: ESRK TK { 6 numeric digits, Input = Keyboard 6 random digits, Input : Display :3 SMP. Coda Paiing Confirm Carlin Value: Madc334940947o€edfilee§339¢9£ a 5M? Coda Pait‘ng Cerf-m Confirm Value‘ NW! 33% 25me
message is transmitted from the responder and contains much of the same information as the initiators
Pairing Request message thus confirming that a pairing is successfully negotiated.
Figure 1 - Sample Initiator Pairing Request
Decode (ComProbe Frame Display, BPA 600
low energy capture)
In the sample SMP decode, in the figure at the right, note
the “keys” identified. Creating a shared, secret key is an
evolutionary process that involves several intermediary
keys. The resulting keys include,
1. IRK: 128-bit key used to generate and resolve
random address.
2. CSRK: 128-bit key used to sign data and verify
signatures on the receiving device.
3. LTK: 128-bit key used to generate the session key
for an encrypted connection.
4. Encrypted Diversifier (EDIV): 16-bit stored value
used to identify the LTK. A new EDIV is generated
each time a new LTK is distributed.
5. Random Number (RAND): 64-bit stored value
used to identify the LTK. A new RAND is
generated each time a unique LTK is distributed.
Of particular importance to decrypting the encrypted data on a Bluetooth low energy link is LTK, EDIV, and
RAND.
A.1.3 Pairing Methods
The two devices in the link use the IO capabilities from Pairing Request and Pairing Response packet data to
determine which of two pairing methods to use for generation of the Temporary Key (TK). The two methods
are Just Works and Passkey Entry1. An example of when Just Works method is appropriate is when the IO
capability input = None and output = None. An example of when Passkey Entry would be appropriate would
be if input= Keyboard and output = Display. There are 25 combinations that result in 13 Just Works methods
and 12 Passkey Entry methods.
In Just Works the TK = 0. In the Passkey Entry method,
Figure 2 - Initiator Pairing Confirm Example (ComProbe Frame Display, BPA 600 low energy capture)
.
Figure 3 - Responder Pairing Confirm Example (ComProbe Frame Display, BPA 600 low energy capture)
1A third method, Out Of Band (OOB), performs the same as Pass Key, but through another external link such
as NFC.
TELEDYNE LECROY Appendicies
197 Frontline BPA low energy Hardware & Software User Manual
lmllalor 5w "mum-m- Responder EJ sm ”mum..." sw P.lrll‘{~nfllm(Mumflrm| mu mm.nm.mumnm| mm 5mm BLELL' MP”: LL_ENC_RED Rm vectov [fir-GI WIMIESIM Encrypted M [EDM 0% MM WWW [SKDmt Manama; Mm mm Veda [1mG W E! LE LL: mum LL_ENC_RSP Slave W k9; idem [SKDsl WIT/mg Slave mm Vestal thk M47023
Figure 4 - Message Sequence Chart: SMP
Pairing
The initiating device will generate a 128-bit random number that
is combined with TK, the Pairing Request command, the Pairing
Response command, the initiating device address and address
type, and the responding device address and address type. The
resulting value is a random number Mconfirm that is sent to the
responding device by the Pairing Confirm command. The
responding device will validate the responding device data in the
Pairing Confirm command and if it is correct will generate a
Sconfirm value using the same methods as used to generate
Mconfirm only with different 128-bit random number and TK. The
responding device will send a Pairing Confirm command to the
initiator and if accepted the authentication process is complete.
The random number in the Mconfirm and Sconfirm data is Mrand
and Srand respectively. Mrand and Srand have a key role in
setting encrypting the link.
Finally the master and slave devices exchange Mrand and Srand
so that the slave can calculate and verify Mconfirm and the master
can likewise calculate and verify Sconfirm.
A.1.4 Encrypting the Link
The Short Term Key (STK) is used for encrypting the link the first time the two devices pair. STK remains in
each device on the link and is not transmitted between devices. STK is formed by combining Mrand and
Srand which were formed using device information and TKs exchanged with Pairing Confirmation (Pairing
Confirm).
A.1.5 Encryption Key Generation and Distribution
Figure 5 - Encryption Request from Master, Example (ComProbe
Frame Display, BPA 600 low energy capture
To distribute the LTK, EDIV, and Rand values
an encrypted session needs to be set up.
The initiator will use STK to enable
encryption on the link. Once an encrypted
link is set up, the LTK is distributed. LTK is a
128-bit random number that the slave
device will generate along with EDIV and
Rand. Both the master and slave devices can
distribute these numbers, but Bluetooth low
energy is designed to conserve energy, so
the slave device is often resource
constrained and does not have the database
storage resources for holding LTKs. Therefore the slave will distribute LTK, EDIV, and Rand to the master
device for storage. When a slave begins a new encrypted session with a previously linked master device, it
will request distribution of EDIV and Rand and will regenerate LTK.
Figure 6 - Encryption Response from Slave, Example (ComProbe
Frame Display, BPA 600 low energy capture)
Appendicies TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 198
Note: The following discussion uses the ComProbe BPA 600 in low energy capture mode to illustrate how to identify the encryption process and to view decrypted data. However any of the ComProbe devices (BPA 500, BPA low energy) that are low energy capable will accomplish the same objectives, although the datasource setup will be slightly different for each device. Min-E- mm. IVAWW “2m laminar...“ M... 9.9”...5W MW WNW H be”... “m... WM-mV-MM WM-Iinmam wow—ya
A.1.6 Encrypting The Data Transmission
Data encryption begins with encrypting the link. The Session Key (SK) is created using a session key diversifier
(SKD). The first step in creating a SK is for the master device to send Link Layer encryption request message
(LL_ENC_REQ) that contains the SKDmaster. The SKDmaster is generated using the LTK. The slave receives
SKDmaster, generates SKDslave, and generates SK by concatenating parts of SKDmaster and SKDslave. The slave
device responds with an encryption response message (LL_ENC_RSP) that contains SKDslave; the master will
create the same SK.
Now that a SK has been calculated, the master and slave devices will now begin a handshake process. The
slave will transmit unencrypted LL_START_ENC_REQ, but sets the slave to receive encrypted data using the
recently calculated SK. The master responds with encrypted LL_START_ENC_RSP that uses the same SK just
calculated and setting the master to receive encrypted data. Once the slave receives the master’s encrypted
LL_START_ENC_RSP message and responds with an encrypted LL_START_ENC_RSP message the Bluetooth
low energy devices can now begin transmitting and receiving encrypted data.
A.1.7 Decrypting Encrypted Data Using Frontline®BPA 600 low energy
Capture
Note: The following discussion uses the ComProbe BPA 600 in low energy capture mode
to illustrate how to identify the encryption process and to view decrypted data. However
any of the ComProbe devices (BPA 500, BPA low energy) that are low energy capable will
accomplish the same objectives, although the datasource setup will be slightly different
for each device.
A.1.7.1 Setting up the BPA 600
Figure 7 - ComProbe BPA 600 low energy only datasource
settings
1. Run the ComProbe Protocol Analysis
Software and select Bluetooth
Classic/low energy (BPA 600). This will
bring up the BPA 600 datasource
window. This is where the parameters are
set for sniffing, including the devices to be
sniffed and how the link is to be decrypted.
2. Select Devices Under Test tab on the
Datasource window.
3. Click/select LE Only.
4. To decrypt encrypted data transmissions
between the Bluetooth low energy devices
the ComProbe analyzer needs to know the
LTK because this is the shared secret used
to encrypt the session. There are two ways
to provide this information and which to
select will depend on the pairing method:
Just Works or Passkey Entry.
TELEDYNE LECROY Appendicies
199 Frontline BPA low energy Hardware & Software User Manual
LEE-spin ButhnIgT-nm Wham“: Dunn-Huh 31 LE om a L1» in sup WP-mlw-I n..— M ”9"“ W 3:: i :nru : (ammo 3::m nun-nu unlmmmu—n a may: I.“ 5.56 2 rush-w- z mmmn malaise mu “m m “I man I nun-.1- as mm): mm mm wgmmhlsm mm 2 P-nm- : mun-m mnsm m a mm“. m I 7mm as mum-m mum marl :mm—ummw—mwwmnm 3m 2 Inn-n.» s mmmn mm vs- Iaqumummra-dx‘y-u— m s rm»:- to mom: mama“ swung-manners m s min-u: u mmmn mnsuzuzw a awn-woman. an" s mum to mama mason-3.42 Em I—wn-Mhl-umumwiw-II-I ans 5 mm to Imam amounts Ih/ nmumIKu—uwn-«u— mm M Ibwfl-u w manna unnsuzmu 5w!“ Mum-sax am u Iu-Iwm- 7| mmmn mmnzmn mu m swim- to mmmu manual
Figure 8 - BPA 600 datasource
Encryption Key Entry
a. Passkey Entry is easiest if you have the code that was
displayed or entered during device pairing. The code is
what is used to generate the LTK. Under LE
Encryption enter the code in the Enter New
PIN/OOB data text box.
b. Just Works is more of a challenge because you must
know the LTK that is created at the time of pairing and
identification of an encrypted link.
lIf your device was previously used in an encrypted
capture session, the device information including
LTK can be found in the Device Database tab.
lIn a design and development environment the LTK is
often known beforehand.
lCapture of Host Controller Interface (HCI) events using ComProbe HSU can reveal the LTK,
which is contained in the HCI_Link_Key_Request_Reply command. HCI capture is through
direct connection to the device host controller. The information obtained in a direct
connection can later be used in a wireless encrypted capture session that requires prior
knowledge of encryption keys.
5. To start capture click on the Start Sniffing button on the BPA 600 datasource toolbar.
A.1.7.2 Use Frame Display to View Encryption/Decryption Process
A.1.7.2.1 Security Manager Protocol
The Security Manager Protocol (SMP) controls the process for pairing and key distribution. The results of a
pairing and key distribution can be observed in the ComProbe software Frame Display. Activate the Frame
Display by clicking on the icon on the Control window toolbar. On the Frame Display low energy protocols
are shown in light green tabs. Click on the SMP protocol tab that will show only the SMP commands from the
full data set.
Figure 9 - SMP Pairing Request (Frame# 35,539) from Initiator (Side 1)
On the left side of the figure above is the Frame Display Decoder pane that shows the decoded
information supplied in the selected frame in the Summary pane, Frame# 35,539. Shown is the SMP data
associated with and encrypted link (MITM Protection = Yes). The requested keys are also shown. Selecting
Frame# 35,545 would provide the response from the responder (Side 2) and would contain similar
information.
Appendicies TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 200
s 9' Catt-rum- Cal-Wu Mann-MW 95-0 “Emu—m m. wanna-almana- s m; mammuqxfl Macaw-am Emlmtmnm I—mwnmm I‘Mmmm E H? an: I?" Efi ifififi "an 2 xxzmmm iiii ii 5mg Efi a...“ raw—u V-u Ina-I hunk-aunt hutch- mule-1h. Imam 5’" III—u 1mm" lemma. 5.7-: Ina—u, I as s wwwu mun mam mm: mm wanna mmmn manna» minim . ammo" manna mm m «ww mum“ mam (minim mama" mmumz mmm mmmn mmm mmm minimum.“ LLumeLJMP Ila um LLSIAELEMLIEII u.smv_:»q_nsv ”JURVJNLW n Human-I mm: .m
Selecting Frame# 39,591 will display the Pairing Confirm from the initiator (Side 1) in the Decoder pane. The
Confirm Value shown is the Mconfirm 128-bit random number that contains TK, Pairing Request command,
Pairing Response command, initiating device address, and the responding device address. Selecting Frame#
39,600 would provide the Sconfirm random number from the responder (Side 2) with similar information
from that device but the random number would be different than Mconfirm.
Once pairing is complete and an encrypted session established, the keys are distributed by the master and
slave now identified by Side = M and Side = S respectively in the Summary pane. In Frame# 39,661 the slave
has distributed LTK to the master to allow exchange of encrypted data. Frame# 39,661 through 39,714 in the
Summary pane SMP tab are the key distribution frames.
Figure 10 - SMP Pairing Confirm (Frame# 39,591) from Initiator (Side 1)
Figure 11 - SMP Key Distribution Frames
A.1.7.2.2 Link Layer
The Link Layer (LL) protocol manages the Bluetooth low energy radio transmissions and is involved in starting
link encryption. To observe the decoded LL commands, click on the Frame Display LE LL tab, search for
and select ControlPkt “LL_ENC_REQ”. This command should originate with Side 1, the initiator of the
encryption link. In Figure 11 Frame# 39,617 is selected in the Summary pane and we see the decoded LE LL
frame is display in the Decoder pane. Shown in this frame packet is the SKDm that is the Master Session Key
Diversifier (SKDmaster). In Frame# 39,623 you will find SKDslave that is combined with SKDmaster to create
the Session Key (SK). Both SDKs were created using the LTK. Frame# 39,635 through 39,649 in the LE LL tab
completes starting of the encryption process. After the slave sends LL_START_ENC_RSP (Frame# 36,649) the
Bluetooth devices can exchange encrypted data, and the ComProbe sniffing device can also receive and
decrypt the encrypted data because the appropriate “key” is provided in the BPA 600 Datasource
window.
Figure 12 - LE LL Tab Encryption Request (Frame# 39,617) from Initiator (Side 1)
TELEDYNE LECROY Appendicies
201 Frontline BPA low energy Hardware & Software User Manual
an"; :uoeo nae» MW” [no—I IT! — Iran-qulml ”mm-.m— Imam-«mutual F m m n:— An- nu- may." mu mu run nu: ma umlu—qlm—ylu-Iumlumn uu wlm In IE! IE 3mm [Wm mum—mama :1.“ch [um-mama“ m-umu-I uguujucfia ;—( Sun nun-u rut-II ugumjlcjto mung-gnu- ILIYWJICJI' -_ mums-nun?
A.1.7.3 Viewing Encryption in the Message Sequence Chart
Figure 13 - MSC SMP Paring (BPA 600 low energy capture)
The ComProbe software Message
Sequence Chart (MSC) links directly
to frames being viewed in the Frame
Display. Similarly MSC will display the
same information as the Frame
Display Decoder pane. Frames are
synchronized between the Frame
Display Summary pane and the
MSC, so clicking on a frame in either
window will select that same frame in
the other window. Also the protocol
tabs are the same in each window. To
see the pairing process, click on the
SMP tab.
In the image above we see Frame#
35,539 initiating the pairing from the
master device. The response, SMP_
Pairing Response, is sent from the slave
in Frame# 35,545. SMP_Pairing
Confirm occurs between the master and the slave devices at Frame# 39,591 and 39,600 respectively.
Clicking on the MSC LE LL tab will show the process of encrypting a session link. Clicking on Frame# 39,617
displays the LL_ENC_REQ command from the master to the slave. In the MSC below this command you will
see the data transferred that includes SKDmaster used to generate the LTK. At Frame# 39,623 the slave
responds with LL_ENC_RSP sending SKDslave to generate LTK at the master. Up to this point all transmissions
are unencrypted. For this example the slave sends the request to start encryption, LL_START_ENC_REQ, at
Frame#39,635. The master responds with LL_START_ENC_RSP at Frame# 39,639, and finally the slave
responds with LL_START_ENC_RSP at Frame# 36,649. At this point the session link is encrypted.
Figure 14 - MSC link Layer Encryption (BPA 600 low energy capture)
A.1.7.4 Viewing Decrypted Data
In the ComProbe software Frame Display click on the LE BB tab. Search in the Summary pane for
Decryption Initiated = Yes frames. In the example depicted in the following figure, Frame# 39723 is selected.
In the Decoder pane LE BB shows that the decryption was initiated and decryption was successful. In LE Data
Appendicies TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 202
.I—Uv-h- 'r-__ , gun nua—n—u— on—u—no n—am u-a a u- on mun: an. n... s—umuw O IMH'IW‘IOEM Igfll‘lflflfl‘hl lflflllflOGOOI" I—uu-n—n-lhullu—po—lnuulmluul ' |flfl9\“‘“fi :
we see the Encrypted MIC value. The MIC value is used to authenticate the sender of the data packet to
ensure that the data was sent by a peer device in the link and not by a third party attacker. The actual
decrypted data appears between the Payload Length and the MIC in the packet. This is shown in the Binary
pane below the Summary pane.
Figure 15 - Decrypted Data Example (Frame# 39,723)
Author: John Trinkle
Publish Date: 9 April 2014
Revised: 23 May 2014
TELEDYNE LECROY Appendicies
203 Frontline BPA low energy Hardware & Software User Manual
I TELEDVNE LECROY IF Everywhereyoulook‘
A.2 Bluetooth® low energy Security
Figure 16 - Chappe's Optical
Telegraph
"Paris is quiet and the good citizens are content." Upon seizing
power in 1799 Napoleon sent this message on Claude Chappe’s
optical telegraph. Chappe had invented a means of sending
messages line-of-sight . The stations were placed approximately
six miles apart and each station had a signaling device made of
paddles on the ends of a rotating “regulator” arm whose positions
represented code numbers. Each station was also outfitted with
two telescopes for viewing the other stations in the link, and
clocks were used to synchronize the stations. By 1803 a
communications network extended from Paris across the
countryside and into Belgium and Italy.
Chappe developed several coding schemes through the next few
years. The station operators only knew the codes, not what
characters they represented. Not only was Chappe’s telegraph
system the first working network with protocols, synchronization
of serial transmissions but it also used data encryption. Although
cryptography has been around for millenniums—dating back to
2000 B.C. — Chappe, was the first to use it in a wide area network in the modern sense.
Frontline BPA low energy Hardware & Software User Manual 204
hrnunulu».\urnWJuuznnw JLJKL4llerEJ E J [Jr 1 I1 ...‘....‘...nuuu.un..munnnnnn P1L JFWL Jr} KJDdtStjrny Itrfikzv
Figure 17 - Chappe's Telegraph Code
Of course anyone positioned between the telegraph stations that
had Chappe's telegraph code in hand could decode the transmission.
So securing the code was of paramount importance in Chappe's
protocol.
Modern wireless networks such as Bluetooth low energy
employ security measures to prevent similar potentially man-in-the-
middle attacks that may have malicious intent.
Bluetooth low energy devices connected in a link can pass sensitive
data by setting up a secure encrypted link. The process is similar to
but not identical to Bluetooth BR/EDR Secure Simple Pairing. One
difference is that in Bluetooth low energy the confidential payload
includes a Message Identification Code (MIC) that is encrypted with
the data. In Bluetooth BR/EDR only the data is encrypted. Also in
Bluetooth low energy the secure link is more vulnerable to passive
eavesdropping, however because of the short transmission periods
this vulnerability is considered a low risk. The similarity to BR/EDR
occurs with "shared secret key", a fundamental building block of
modern wireless network security.
This paper describes the process of establishing a Bluetooth low
energy secure link.
A.2.1 How Encryption Works in Bluetooth low energy
Data encryption is used to prevent passive and active—man-in-the-middle (MITM) — eavesdropping attacks
on a Bluetooth low energy link. Encryption is the means to make the data unintelligible to all but the Bluetooth
master and slave devices forming a link. Eavesdropping attacks are directed on the over-the-air transmissions
between the Bluetooth low energy devices, so data encryption is accomplished prior to transmission using a
shared, secret key.
A.2.2 Pairing
ABluetooth low energy device that wants to share secure data with another device must first pair with that
device. The Security Manager Protocol (SMP) carries out the pairing in three phases.
1. The two connected Bluetooth low energy devices announce their input and output capabilities and
from that information determine a suitable method for phase 2.
2. The purpose of this phase is to generate the Short Term Key (STK) used in the third phase to secure
key distribution. The devices agree on a Temporary Key (TK) that along with some random numbers
creates the STK.
3. In this phase each device may distribute to the other device up to three keys:
a. the Long Term Key (LTK) used for Link Layer encryption and authentication,
b. the Connection Signature Resolving Key (CSRK) used for data signing at the ATT layer, and
c. the Identity Resolving Key (IRK) used to generate a private address.
Of primary interest in this paper is the LTK. CSRK and IRK are covered briefly at the end.
Bluetooth low energy uses the same pairing process as Classic Bluetooth: Secure Simple Pairing (SSP). During
SSP initially each device determines its capability for input and output (IO). The input can be None, Yes/No, or
TELEDYNE LECROY Appendicies
205 Frontline BPA low energy Hardware & Software User Manual
:1 94? too: Pm firm In CM: KWOuW ous an. flux nus Mums-an dell «1 mm a Amman ammo: 3mm mm mm Pvuhechon VI: MWEWKEJ/Sm 16 Bass d mun Ks; own-um [Ids] mm mud‘mwa UK lowed wzmv nan-u IM Inn-m ma mmulax Mama I» um: Sm lmflm ml mm: CSFIK a Rumor-1a Kw owwm may Rwanda ml 6:"ngan Vulwoed w Isedfiets sm inwards: ml Mm: ESRK [mm “my mums.“ UK lolowedb/EDNnndfimd TK 7 { 6 numeric digits, Input = Keyboard 7 6 random digits, Input : Display .1 SMP. Coda Paiing Confirm Carlin Value: Madc334340847c89wee§339fi£
Keyboard with Keyboard having the ability to input a number. The output can be either None or Display with
Display having the ability to display a 6-digit number. For each device in a paring link the IO capability
determines their ability to create encryption shared secret keys.
The Pairing Request message is transmitted from the initiator containing the IO capabilities, authentication
data availability, authentication requirements, key size requirements, and other data. A Pairing Response
message is transmitted from the responder and contains much of the same information as the initiators
Pairing Request message thus confirming that a pairing is successfully negotiated.
Figure 18 - Sample Initiator Pairing Request
Decode (ComProbe Frame Display, BPA 600
low energy capture)
In the sample SMP decode, in the figure at the right, note
the “keys” identified. Creating a shared, secret key is an
evolutionary process that involves several intermediary
keys. The resulting keys include,
1. IRK: 128-bit key used to generate and resolve
random address.
2. CSRK: 128-bit key used to sign data and verify
signatures on the receiving device.
3. LTK: 128-bit key used to generate the session key
for an encrypted connection.
4. Encrypted Diversifier (EDIV): 16-bit stored value
used to identify the LTK. A new EDIV is generated
each time a new LTK is distributed.
5. Random Number (RAND): 64-bit stored value
used to identify the LTK. A new RAND is
generated each time a unique LTK is distributed.
Of particular importance to decrypting the encrypted data on a Bluetooth low energy link is LTK, EDIV, and
RAND.
A.2.3 Pairing Methods
The two devices in the link use the IO capabilities from Pairing Request and Pairing Response packet data to
determine which of two pairing methods to use for generation of the Temporary Key (TK). The two methods
are Just Works and Passkey Entry1. An example of when Just Works method is appropriate is when the IO
capability input = None and output = None. An example of when Passkey Entry would be appropriate would
be if input= Keyboard and output = Display. There are 25 combinations that result in 13 Just Works methods
and 12 Passkey Entry methods.
In Just Works the TK = 0. In the Passkey Entry method,
Figure 19 - Initiator Pairing Confirm Example (ComProbe Frame Display, BPA 600 low energy capture)
1A third method, Out Of Band (OOB), performs the same as Pass Key, but through another external link such
as NFC.
Appendicies TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 206
E] SMR Bode: Paifng Mini Carlin“ Value: 0mm: 33M ZSMMWZSSMA lmllalor Responder 5w "mum-m- sm ”mum..." sw P.lrll‘{~nfllm(Mumflrm| mu mm.nm.mumnm| mm 5mm El LE LL' Md Pkt LL_ENC_RED Rm m [fir-at mmwmm Encrypted M [EDM I)“: Mm WWW [SKDmt Manama; Mm mm Veda [1mG W
.
Figure 20 - Responder Pairing Confirm Example (ComProbe Frame Display, BPA 600 low energy capture)
Figure 21 - Message Sequence Chart:
SMP Pairing
The initiating device will generate a 128-bit random number that
is combined with TK, the Pairing Request command, the Pairing
Response command, the initiating device address and address
type, and the responding device address and address type. The
resulting value is a random number Mconfirm that is sent to the
responding device by the Pairing Confirm command. The
responding device will validate the responding device data in the
Pairing Confirm command and if it is correct will generate a
Sconfirm value using the same methods as used to generate
Mconfirm only with different 128-bit random number and TK. The
responding device will send a Pairing Confirm command to the
initiator and if accepted the authentication process is complete.
The random number in the Mconfirm and Sconfirm data is Mrand
and Srand respectively. Mrand and Srand have a key role in
setting encrypting the link.
Finally the master and slave devices exchange Mrand and Srand
so that the slave can calculate and verify Mconfirm and the master
can likewise calculate and verify Sconfirm.
A.2.4 Encrypting the Link
The Short Term Key (STK) is used for encrypting the link the first time the two devices pair. STK remains in
each device on the link and is not transmitted between devices. STK is formed by combining Mrand and
Srand which were formed using device information and TKs exchanged with Pairing Confirmation (Pairing
Confirm).
A.2.5 Encryption Key Generation and Distribution
Figure 22 - Encryption Request from Master, Example
(ComProbe Frame Display, BPA 600 low energy capture
To distribute the LTK, EDIV, and Rand values
an encrypted session needs to be set up. The
initiator will use STK to enable encryption on
the link. Once an encrypted link is set up, the
LTK is distributed. LTK is a 128-bit random
number that the slave device will generate
along with EDIV and Rand. Both the master
and slave devices can distribute these
numbers, but Bluetooth low energy is
designed to conserve energy, so the slave
device is often resource constrained and
does not have the database storage
resources for holding LTKs. Therefore the slave will distribute LTK, EDIV, and Rand to the master device for
storage. When a slave begins a new encrypted session with a previously linked master device, it will request
distribution of EDIV and Rand and will regenerate LTK.
TELEDYNE LECROY Appendicies
207 Frontline BPA low energy Hardware & Software User Manual
E! LE LL: mum LL_ENE_RSP Slave swim Ito/idem: Isms) Wlm Slave mm m thk 054N223
Figure 23 - Encryption Response from Slave, Example
(ComProbe Frame Display, BPA 600 low energy capture)
A.2.6 Encrypting The Data Transmission
Data encryption begins with encrypting the link. The Session Key (SK) is created using a session key diversifier
(SKD). The first step in creating a SK is for the master device to send Link Layer encryption request message
(LL_ENC_REQ) that contains the SKDmaster. The SKDmaster is generated using the LTK. The slave receives
SKDmaster, generates SKDslave, and generates SK by concatenating parts of SKDmaster and SKDslave. The slave
device responds with an encryption response message (LL_ENC_RSP) that contains SKDslave; the master will
create the same SK.
Now that a SK has been calculated, the master and slave devices will now begin a handshake process. The
slave will transmit unencrypted LL_START_ENC_REQ, but sets the slave to receive encrypted data using the
recently calculated SK. The master responds with encrypted LL_START_ENC_RSP that uses the same SK just
calculated and setting the master to receive encrypted data. Once the slave receives the master’s encrypted
LL_START_ENC_RSP message and responds with an encrypted LL_START_ENC_RSP message the Bluetooth
low energy devices can now begin transmitting and receiving encrypted data.
A.2.7 IRK and CSRK Revisited
Earlier in this paper it was stated that LTK would be the focus, however the IRK and CSRK were mentioned.
We revisit these keys because they are used in situations that require a lesser level of security. First let us
note that IRK and CSRK are passed in an encrypted link along with LTK and EDIV.
Use of the IRK and CSRK attempt to place an identity on devices operating in a piconet. The probability that
two devices will have the same IRK and generate the same random number is low, but not absolute.
IRK and Bluetooth low energy Privacy Feature
Bluetooth low energy has a feature that reduces the ability of an attacker to track a device over a long period
buy frequently and randomly changing an advertising device's address. This is the privacy feature. This feature
is not used in the discovery mode and procedures but is used in the connection mode and procedures.
If the advertising device was previously discovered and has returned to an advertising state, the device must
be identifiable by trusted devices in future connections without going through discovery procedure again. The
IRK stored in the trusted device will overcome the problem of maintaining privacy while saving discovery
computational load and connection time. The advertising devices IRK was passed to the master device during
initial bonding. The a master device will use the IRK to identify the advertiser as a trusted device.
CSRK and Signing for Authentication
Bluetooth low energy supports the ability to authenticate data sent over an unencrypted ATT bearer between
two devices in a trust relationship. If authenticated pairing has occurred and encryption is not required
(security mode 2) data signing is used if CSRK has been exchanged. The sending device attaches a digital
signature after the data in the packet that includes a counter and a message authentication code (MAC). The
key used to generate MAC is CSRK. Each peer device in a piconet will have a unique CSRK.
The receiving device will authenticate the message from the trusted sending device using the CSRK
exchanged from the sending device. The counter is initialized to zero when the CSRK is generated and is
incremented with each message signed with a given CSRK. The combination of the CSRK and counter
mitigates replay attacks.
Appendicies TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 208
A.2.8 Table of Acronyms
CSRK Connection Signature Resolving Key
EDIV Encrypted Diversifier
IO Input and output
IRK Identity Resolving Key
LTK Long Term Key
Mconfirm 128-bit confirm value from initiator
MIC Message Integrity Check
MITM Man-in-the-middle
Mrand 128-bit random number used to generate Mconfirm
OOB Out of Band
RAND Random Number
Sconfirm 128-bit confirmation value from the responder
SK Session key
SMP Security Manager Protocol
Srand 128-bit random number used to generate Sconfirm
SSP Secure Simple Pairing
STK Short Term Key
TK Temporary Key
Author: John Trinkle
Publish Date:21 May 2014
TELEDYNE LECROY Appendicies
209 Frontline BPA low energy Hardware & Software User Manual
TELEDYNE LECROY
A.3 Bluetooth Virtual Sniffing
A.3.1 Introduction
The ComProbe software Virtual sniffing function simplifiesBluetooth® development and is easy to use.
Frontline’s Virtual sniffing with Live Import provides the developer with an open interface from any
application to ComProbe software so that data can be analyzed and processed independent of sniffing
hardware. Virtual sniffing can also add value to other Bluetooth development tools such as Bluetooth stack
SDKs (Software Development Kits) and Bluetooth chip development kits.
This white paper discusses:
lWhy HCI sniffing and Virtual sniffing are useful.
lBluetooth sniffing history.
lWhat is Virtual sniffing?
lWhy Virtual sniffing is convenient and reliable.
lHow Virtual sniffing works.
lVirtual sniffing and Bluetooth stack vendors.
lCase studies: Virtual sniffing and Bluetooth mobile phone makers.
lVirtual sniffing and you. • Where to go for more information.
A.3.2 Why HCI Sniffing and Virtual Sniffing are Useful
Because the Bluetooth protocol stack is very complex, a Bluetooth protocol analyzer is an important part of all
Bluetooth development environments. The typical Bluetooth protocol analyzer “taps” a Bluetooth link by
capturing data over the air. For many Bluetooth developers sniffing the link between a Bluetooth Host CPU
and a Bluetooth Host Controller—also known as HCI-sniffing—is much more useful than air sniffing.
HCI-sniffing provides direct visibility into the commands being sent to a Bluetooth chip and the responses to
those commands. With air sniffing a software engineer working on the host side of a Bluetooth chip has to
infer and often guess at what their software is doing. With HCI-sniffing, the software engineer can see exactly
what is going on. HCI-sniffing often results in faster and easier debugging than air sniffing.
Frontline BPA low energy Hardware & Software User Manual 210
ComProbe software’s Virtual sniffing feature is a simple and easy way to perform HCI-sniffing. Virtual sniffing
is not limited to just HCI-sniffing, but it is the most common use and this white paper will focus on the HCI-
sniffing application of Virtual sniffing.
It is also important to understand that ComProbe software is a multi-mode product. ComProbe software does
support traditional air sniffing. It also supports serial HCI sniffing (for the H4 (HCI UART), H5 (3-wire UART) , and
BCSP (BlueCore Serial Protocol) protocols), USB HCI (H2) sniffing, SDIO sniffing, and Virtual sniffing. So with
ComProbe software nothing is sacrificed—the product is simply more functional than other Bluetooth
protocol analyzers.
A.3.3 Bluetooth Sniffing History
Frontline has a strong appreciation for the importance of HCI sniffing because of the way we got involved with
Bluetooth. Because of our company history, we are uniquely qualified to offer a multi-mode analyzer that
provides many ways to sniff and supports a wide variety of protocols. This brief Bluetooth sniffing history
should help you understand our approach to Bluetooth protocol analysis.
In the early days of Bluetooth, there were no commercially available Bluetooth protocol analyzers, so
developers built their own debug tools and/or used protocol analyzers that weren’t built for Bluetooth. Many
developers built homegrown HCI analyzers—basically hex dumps and crude traces—because they recognized
the need for visibility into the HCI interface and because it was too difficult to build air sniffers. Several
companies developed air sniffers because they saw a market need and because they realized that they could
charge a high price (USD $25,000 and higher).
Two Bluetooth chip companies, Silicon Wave and Broadcom were using Frontline’s Serialtest® serial analyzer
to capture serial HCI traffic and then they would manually decode the HCI byte stream. This manual decoding
was far too much work and so, independently, Silicon Wave and Broadcom each requested that Frontline
produce a serial HCI Bluetooth analyzer that would have all the features of Serialtest. In response to these
requests Frontline developed SerialBlue®—the world’s first commercially available serial HCI analyzer.
The response to SerialBlue was very positive. When we asked our Bluetooth customers what they wanted
next we quickly learned that there was a need for an affordable air sniffer that provided the same quality as
SerialBlue. We also learned that the ultimate Bluetooth analyzer would be one that sniff air and sniff HCI
simultaneously.
As work was progressing on our combination air sniffer and HCI sniffer the functional requirements for
Bluetooth analyzers were changing. It was no longer good enough just to decode the core Bluetooth protocols
(LMP, HCI, L2CAP, RFCOMM, and OBEX). Applications were beginning to be built on top of Bluetooth and
therefore application level protocol decoding was becoming a requirement. For example, people were
starting to browse the Internet using Bluetooth-enabled phones and PDAs therefore a good Bluetooth analyzer
would need to support TCP/IP, HTTP, hands-free, A2DP, etc.
For Frontline to support for these higher levels protocols was no problem since they were already in use in
other Frontline analyzer products. People have been using Frontline Serialtest serial analyzers and Ethertest™
Ethernet analyzer to troubleshoot TCP/IP and Internet problems for many years.
As we continued to work closely with the Bluetooth community we also came across one other requirement:
sniffing itself had to be made easier. We took a two-pronged approach to this problem. We simplified air
sniffing (and we continue to work on simplifying the process of air sniffing) and we invented Virtual sniffing.
A.3.4 Virtual Sniffing—What is it?
Historically, protocol analyzers have physically tapped the circuit being sniffed. For example, an Ethernet
circuit is tapped by plugging into the network. A serial connection is sniffed by passively bridging the serial
link. A Bluetooth air sniffer taps the piconet by synchronizing its clock to the clock of the piconet Master.
Not only is there a physical tap in traditional sniffing, but the sniffer must have some knowledge of the
physical characteristics of the link being sniffed. For example, a Bluetooth air sniffer must know the BD_ADDR
TELEDYNE LECROY Appendicies
211 Frontline BPA low energy Hardware & Software User Manual
of at least one piconet member to allow it perform clock synchronization. A serial sniffer must know the bit
rate of the tapped circuit or be physically connected to the clock line of the circuit.
With Virtual sniffing the protocol analyzer itself does not actually tap the link and the protocol analyzer does
not require any knowledge of the physical characteristics of the link.
In computer jargon, “virtual” means “not real”. Virtual memory is memory that doesn’t actually exist. Virtual
reality is something that looks and feels real, but isn’t real. So we use the term Virtual sniffing, because there
is sniffing taking place, but not in the traditional physical sense.
A.3.5 The Convenience and Reliability of Virtual Sniffing
Virtual sniffing is the most convenient and reliable form of sniffing and should be used in preference to all
other forms of sniffing whenever practical. Virtual sniffing is convenient because it requires no setup to use
except for a very small amount of software engineering (typically between one and four hours) that is done
once and then never again. Once support for Virtual sniffing has been built into application or into a
development environment none of the traditional sniffing setup work need be done.
This means:
lNO piconet synchronization.
lNO serial connection to tap.
lNO USB connection to tap.
Virtual sniffing is reliable because there is nothing that can fail. With Virtual sniffing all data is always captured.
A.3.6 How Virtual Sniffing Works
ComProbe software Virtual sniffing works using a feature called Live Import. Any application can feed data
into ComProbe software using Live Import. A simple API provides four basic functions and a few other more
advanced functions. The four basic Live Import functions are:
lOpen a connection to ComProbe software.
lClose a connection to ComProbe software.
lSend an entire packet to ComProbe software.
lSend a single byte to ComProbe software.
All applications that send data to ComProbe software via Live Import use the first two functions. Usually only
one of the two Send functions is used by a particular application. When ComProbe software receives data
from the application via Live Import, the data is treated just as if it had been captured on a Frontline
ComProbe sniffer. The entire protocol stack is fully decoded.
With Virtual sniffing the data can literally be coming from anywhere. ComProbe software does not care if the
data being analyzed is being captured on the machine where ComProbe software is running or if the data is
being captured remotely and passed into ComProbe software over an Internet connection.
A.3.7 Virtual Sniffing and Bluetooth Stack Vendors
As the complexity of the Bluetooth protocol stack increases Bluetooth stack vendors are realizing that their
customers require the use of a powerful Bluetooth protocol analyzer. Even if the stack vendor’s stack is bug
free, there are interoperability issues that must be dealt with.
The homegrown hex dumps and trace tools from the early days of Bluetooth just are not good enough
anymore. And building a good protocol analyzer is not easy. So stack vendors are partnering with Frontline.
This permits the stack vendors to concentrate of improving their stack.
Appendicies TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 212
The typical Bluetooth stack vendor provides a Windows-based SDK. The stack vendor interfaces their SDK to
ComProbe software by adding a very small amount of code to the SDK, somewhere in the transport area,
right about in the same place that HCI data is sent to the Host Controller.
If ComProbe software is installed on the PC and the Virtual sniffer is running then the data will be captured
and decoded by ComProbe software, in real-time. If ComProbe software is not installed or the Virtual sniffer
is not running then no harm is done. Virtual sniffing is totally passive and has no impact on the behavior of the
SDK.
One Frontline stack vendor partner feels so strongly about ComProbe software that not only have they built
Virtual sniffing support in their SDK, but they have made ComProbe software an integral part of their product
offering. They are actively encouraging all customers on a worldwide basis to adopt ComProbe software as
their protocol analysis solution.
A.3.8 Case Studies: Virtual Sniffing and Bluetooth Mobile Phone Makers
Case Study # 1
ABluetooth mobile phone maker had been using a homemade HCI trace tool to debug the link between the
Host CPU in the phone the Bluetooth chip. They also were using an air sniffer. They replaced their entire
sniffing setup by moving to ComProbe software.
In the original test setup the Host CPU in the phone would send debug messages and HCI data over a serial
link. A program running on a PC logged the output from the Host CPU. To implement the new system using
Virtual sniffing, a small change was made to the PC logging program and it now sends the data to ComProbe
software using the Live Import API. The HCI traffic is fully decoded and the debug messages are decoded as
well.
The decoder for the debug messages was written using ComProbe software’s DecoderScript feature.
DecoderScript allows ComProbe software user to write custom decodes and to modify decodes supplied with
ComProbe software. DecoderScript is supplied as a standard part of ComProbe software. In this case, the
customer also created a custom decoder for HCI Vendor Extensions.
The air sniffer that was formerly used has been replaced by the standard ComProbe software air sniffer.
Case Study # 2
A second Bluetooth mobile phone maker plans to use Virtual sniffing in conjunction with a Linux-based
custom test platform they have developed. Currently they capture serial HCI traffic on their Linux system and
use a set of homegrown utilities to decode the captured data.
They plan to send the captured serial HCI traffic out of the Linux system using TCP/IP over Ethernet. Over on
the PC running ComProbe software they will use a simple TCP/IP listening program to bring the data into the
PC and this program will hand the data off to ComProbe software using the Live Import API.
A.3.9 Virtual Sniffing and You
If you are a Bluetooth stack vendor, a Bluetooth chip maker, or a maker of any other products where
integrating your product with ComProbe software’s Virtual sniffing is of interest please contact Frontline to
discuss your requirements. There are numerous approaches that we can use to structure a partnership
program with you. We believe that a partnership with Frontline is an easy and cost-effective way for you to
add value to your product offering.
If you are end customer and you want to take advantage of Virtual sniffing, all you need to do is buy any
Frontline Bluetooth product. Virtually sniffing comes standard with product.
TELEDYNE LECROY Appendicies
213 Frontline BPA low energy Hardware & Software User Manual
Author: Eric Kaplan
Publish Date: May 2003
Revised: December 2013
Appendicies TELEDYNE LECROY
Frontline BPA low energy Hardware & Software User Manual 214
Index
A
A2DP Decoder Parameters 23
Aborted Frame 179
About Display Filters 58
About L2CAP Decoder Parameters 23
Absolute Time 184
Adaptive Frequency Hopping
PER Stats 129
Add a New or Save an Existing Template 22
Adding a New Predefined Stack 35
Adding Comments To A Capture File 166
Advanced System Options 178
Apply Capture Filters 60
Apply Display Filters 58-60, 62-63
ASCII 139
character set 188
viewing data in 139
ASCII Codes 188
ASCII Pane 55
Auto-Sizing Column Widths 53
Automatically Request Missing Decoding
Information 37
Automatically Restart 176
Automatically Restart Capturing After 'Clear
Capture Buffer' 176
Automatically Save Imported Capture Files 176
Autotraversal 35, 37
B
Baudot 139, 175
Baudot Codes 188
Begin Sync Character Strip 140
Binary 138, 149
Binary Pane 56
BL 190
Bookmarks 161-162
Boolean 60, 65
BPA low energy; I/O Settings 14
Broken Frame 139
BS 190
BT Snoop File Format 185
Btsnoop 185
Buffer 165, 176
Buffer Overflow 176
Buffer/File Options 176
Byte 56, 136, 138, 188
Searching 151
byte export 48
C
Calculating Data Rates and Delta Times 136
Capture Buffer 165, 176, 178
Capture Buffer Size 176
Capture File 31, 165-168, 176, 178
auto-save imported files 176
capture to a series of files 176
capture to one file 176
changing default location of 179
changing max size of 176, 178
framing captured data 36
importing 168
loading 167
reframing 36
removing framing markers 36
Appendicies Frontline BPA low energy Hardware & Software
User Manual
- 216 -
saving 165-166
starting capture to file 31
Capturing 31
Data to Disk 31
CFA file 166-167
Changing Default File Locations 179
Character 149, 189
Character Pane 55
Character Set 139, 188-189
Choosing a Data Capture Method 3
Clear Capture Buffer 176
CN 190
Coexistence View 90
le Devices Radio Buttons 107
Legend 108
Set Button 106
Throughput Graph 100
Discontinuities 101
Dots 103
Swap Button 102
Viewport 102
Zoom Cursor 105
Zoomed 104
Freeze Y 104
Unfreeze Y 105
Y Scales Frozen 105
Throughput Indicators 98
Throughput Radio Buttons 107
Timeline Radio Buttons 107
Timelines 108
discontinuities 114
high-speed 116
packet 108
two timelines 112
Toolbar 96
Tooltip 101
relocate 101, 110
Color of Data Bytes 57
Colors 57
Comma Separated File 172
Compound Display Filters 60
Confirm CFA Changes 167
Context For Decoding 37
Control Characters 189
Control Signals 140, 181
Control Window 12, 176
Configuration Information 7
Conversation Filters 62
CPAS Control Window Toolbar 7
CR 190
CRC 136
CSV Files 172
Custom Protocol Stack 34-35
Custom Stack 34-35
Customizing Fields in the Summary Pane 53
D
D/1 190
D/2 189
D/3 189
D/4 189
D/E 190
- 217 -
Frontline BPA low energy Hardware & Software
User Manual
Appendicies
Data 136, 164-165
Capturing 31
Data Byte Color Denotation 57
Data Errors 156
Data Extraction 141
Data Rates 136
Decimal 138
Decode Pane 54
decoder 190
Decoder Parameters 19
DecoderScript 190
Decodes 19, 34, 38, 44, 54, 146
decrypt 53
decryption status 53
Default File Locations 179
Delete a Template 22
Deleting Display Filters 63
Delta Times 136
Direction 62
Directories 180
Disabling 176
Display Filters 58, 63-65
Display Options 184
DL 190
Dots 54
Duplicate View 47-48, 134, 136
E
E/B 190
E/C 190
Easy Protocol Filtering 72
EBCDIC 139
EBCDIC Codes 189
EIR 33
EM 189
EQ 190
Errors 57, 73, 156, 181
ET 189
Event Display 47, 133, 172
Event Display Export 172
Event Display Toolbar 134
Event Numbering 188
Event Pane 56
Event Symbols 139
EX 189
Exclude 60
Exclude Radio Buttons 60
Expand All/Collapse All 54
Expand Decode Pane 48
Export
Export Baudot 175
Export Events 173
Export Filter Out 175
Extended Inquiry Response 33
F
F/F 189
FCSs 136
Field Width 53
File 164-167, 176
File Locations 180
File Series 176
File Types Supported 167
Appendicies Frontline BPA low energy Hardware & Software
User Manual
- 218 -
Filtering 71
Filters 58-60, 62-65, 72
Find 146, 148, 150-151, 153, 156
Find - Bookmarks 159
Find Introduction 145
Font Size 141
Frame Display 38, 41, 44-45, 47-48, 53-57
Frame Display - Change Text Highlight
Color 56
Frame Display - Find 45
Frame Display Status Bar 44
Frame Display Toolbar 41
Frame Display Window 39
Frame Recognizer Change 140
Frame Symbols 54
Frame Information on the Control Window 8
Freeze 137
FS 190
G
Go To 151
Green Dots in Summary Pane 54
GS 189
H
Hex 138
Hexadecimal 55
Hiding Display Filters 63
Hiding Protocol Layers 44
High Resolution Timestamping 183
HT 190
I
I/O Settings Change 140
Icons in Data on Event Display 139
Importable File Types 168
Importing Capture Files 167
INCLUDE 60
Include/Exclude 60
L
L2CAP 23
L2CAP Override Decode Information 25
Layer Colors 57
LF 190
Live Update 137
Logical Byte Display 45
Logical Bytes 45
Long Break 140
low energy Data Encryption/Master and Slave
Assignment 52
Low Energy Timeline
Button Bar/Legend 74
Discontinuities 86
Legend 79
Navigating and Selecting Data 86
Zooming 87
low energy Timeline Introduction 73
Low Power 140
M
Main Window 6
Message Sequence Chart 118
Message Sequence Chart - Find and Go To 123
Message Sequence Chart - Go To 124
Minimizing 12
Missing Decode Information 27
Mixed Channel/Sides 139
Mixed Sides Mode 139
- 219 -
Frontline BPA low energy Hardware & Software
User Manual
Appendicies
Modem Lead Names 181
Modify Display Filters 64-65
Multiple Event Displays 136
Multiple Frame Displays 47
N
NK 190
Node Filters 62
Nonprintables 175
Notes 166
NU 189
Number Set 138
Numbers 188
O
Octal 138
Open 136
Open Capture File 167
Options 176, 178-179, 182
Other Term
Subterm 11
Override Decode Information 25, 27
Overriding Frame Information 37
Overrun Errors 158
P
Packet Error Rate (PER Stats) 127
Packet Error Rate 127
PER Stats Scroll Bar 132
Panes 48
Pattern 148
Pause 31
Performance Notes 184
Physical Errors 57
Printing 171
Printing from the Frame Display 168
Progress Bars 187
Protocol
Protocol Layer Colors 57
Protocol Layer Filtering 71
Protocol Stack 34-35, 37
Q
Quick Filtering 71, 73
R
Radix 55, 138
Red Frame Numbers 57
Reframe 36
Reframing 36
Relative Time 150, 183
Remove
Bookmarks 161-162
Columns 53
Custom Stack 34
Filters 63
Framing Markers 36
Reset Panes 48
Resolution 183
Resumed 140
Revealing Protocol Layers 44
RFCOMM 25, 27
RFCOMM Missing Decode Information 27
RFCOMM Override Decode Information 27
RS 189
S
Save 60, 164-166
Appendicies Frontline BPA low energy Hardware & Software
User Manual
- 220 -
Save As 164
Saving 165-166
Display Filter 59
Imported Capture Files 176
Saving the Capture File using File &gt; Save or the
Save icon 164
Search 146, 148-149, 151, 153, 156, 160, 162
binary value 148
bookmarks 162
character string 148
errors 156
event number 152
frame number 152
hex pattern 148
pattern 148
special event 153
timestamp 149
wildcards 148
Seed Value 136
Short Break 140
Side Names 181
Sides 181
Sorting Frames 45
Special Events 153
Start 139
Start Up Options 179
Summary 50
Summary Pane 50, 53-54
Sync Dropped 140
Sync Found 140
Sync Hunt Entered 140
Sync Lost 140
Synchronization 47
System Settings 176, 178
T
Technical Support 192
Test Device Began Responding 141
Test Device Stopped Responding 140
Timestamp 160, 183
Timestamping 160, 182-183
Timestamping Disabled 141
Timestamping Enabled 141
Timestamping Options 176, 182
Timestamping Resolution 183
Timestamps 182-183
Transferring Packets 31
Truncated Frame 141
U
unable to decrypt 53
Underrun Error 141
Unframe 36
Unframe Function 36
Unframing 36
Unknown Event 141
V
vendor specific decoder 190
Viewing Data Events 137
W
Wrap Buffer/File 176
Z
zooming cursor 105
- 221 -
Frontline BPA low energy Hardware & Software
User Manual
Appendicies