Page 1
User Manual BPA105 Bluetooth Protocol Analyzer 071-XXXX-00 This document applies to firmware version 2.3 and above. Check for regular BPA Series software updates at www.tektronix.com/bpa_software www.tektronix.com...
Page 3
Tektronix, with shipping charges prepaid. Tektronix shall pay for the return of the product to Customer if the shipment is to a location within the country in which the Tektronix service center is located. Customer shall be responsible for paying all shipping charges, duties, taxes, and any other charges for products returned to any other locations.
Page 4
In order to obtain service under this warranty, Customer must notify Tektronix of the defect before the expiration of the warranty period. If Tektronix is unable to provide a replacement that is free from defects in materials and workmanship within a reasonable time thereafter, Customer may terminate the license for this software product and return this software product and any associated materials for credit or refund.
Page 5
..........C- - 1 Glossary Index BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
......A- -3 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 7
CAUTION. Caution statements identify conditions or practices that could result in damage to this product or other property. Symbols on the Product. The following symbols may appear on the product: CAUTION Refer to Manual BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 8
General Safety Summary BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 9
Preface This manual provides operating information for the Tektronix BPA105 Bluetooth Protocol Analyzer and is organized into the following sections: H Operating Basics provides basic instructions for operating the Tektronix Bluetooth Protocol Analyzer. H Reference provides detailed information on acquiring and analyzing piconet packet data.
Page 10
This phone number is toll free in North America. After office hours, please leave a voice mail message. Outside North America, contact a Tektronix sales office or distributor; see the Tektronix web site for a list of offices. BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL...
Additionally, the Bluetooth Protocol Analyzer has features that allow you to generate baseband packets containing known errors for testing purposes. Information on error packet generation can be found on page 2- -3. 1- 1 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
View the status of each packet and estimated the clock and hop frequency. H Select specified hopping patterns: Europe/USA, Japan, France, or Spain. H Transmit and receive on a single user-defined frequency. H Set a correlation value. 1- 2 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 15
Piconet mode (working as a participant in a piconet). When you use the Bluetooth Protocol Analyzer in the Independent mode (working as a passive listener), you cannot use it with Bluetooth Neighborhood. 1- 3 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Menu bar Toolbar Status bar Data window Figure 1- 1: The Bluetooth Protocol Analyzer data acquisition window 1- 4 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Print Setup Define the margins and other printer properties for printing data files. Print Window Print the active window using the Page Setup dialog box. 1- 5 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 18
Pre-Post disk space available on your PC. Trigger Buffer dialog box. See page 1- - 23 for additional information. 1- 6 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 19
Define the data format of the displayed columns: decimal, hex, binary, ASCII. Help > Topics Display online help contents main menu. Help on window Display the help topic for the active window. 1- 7 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 20
At the bottom of the data windows the Session Info toolbar displays the following information: H Start and end times of the last acquisition session H Number of baseband packets logged H Log size H Date 1- 8 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
When you start a logging session, the analyzer logs all baseband packets sent from and received by your computer, whether the Bluetooth Protocol Analyzer is acting as a slave or a master. 1- 9 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 22
This is done by performing an inquiry to the slave. You must identify a slave in the Select Slave dialog box. See Select Master or Slave on page 1- -11. 1- 10 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
H Select: Click on the device name you want to synchronize too; then click Select and close the Select Master or Select Slave dialog box. Figure 1- 3: Select Master and Select Slave dialog boxes 1- 11 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
If synchronization to the piconet is lost (41-second timeout) the indicator changes to red, indicating that synchro- nization to the piconet is lost. Figure 1- 4: Acquisition window Sync Bar 1- 12 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 25
Acquisition Window to continuously monitor the latest session transactions with real-time screen updates. In both cases, stop the acquisition and save the data to a file for later analysis. 1- 13 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
0x0041. This information is available in the Comments portion of the Customize pattern dialog in LLT. You can also recover this information when performing service discovery for SDP and business card exchange for RFCOMM. 1- 14 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 27
The default sequence is named Trigger. As you create additional sequences, they will automatically be named Trigger1, Trigger2, and Trigger3. 1- 15 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
The color codes are as follows: H Yellow indicates a pattern in an active sequence. H Green indicates the final pattern (low and high-level trigger packets). H Red indicates a time-out. 1- 16 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 29
You can enter a value from 2 through 200. In all cases, the first sequence to be completed triggers the Bluetooth Protocol Analyzer, and the following sequences are marked in the display. 1- 17 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 30
3. Select the pattern that you want to modify. Once activated, click the Customize button to access the Customize Pattern dialog box and set up advanced triggering parameters. See Figure 1- -7. 1- 18 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
All the fields in Customize pattern dialog box are used to set conditions for triggers to occur. In the Status field you can set some conditions like trigger 1- 19 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 32
H ARQN: One bit is used for acknowledgement of the last transmission. If a packet is received correctly, the ARQN bit is set to 1 in the return packet. You can also select “don’t care” for this bit. 1- 20 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 33
There are ten hardware slots into which you can load patterns. NOTE. Due to hardware limitations, you are only allowed 10 hardware patterns (slots 0 through 9) for low level triggers. 1- 21 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Don’t Care. For RFCOMM, the Payload data starts at the second byte of the RFCOMM information field; for SDP, the Payload data starts from the first byte of the SDP parameter data part. 1- 22 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
NOTE. If you do not check the Enable Post Trigger box, post-trigger data is saved until you manually stop the logging or the hard disk becomes full. Figure 1- 9: Pre-Post Trigger Buffer set up dialog box 1- 23 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Save As dialog box. Using the HCI Terminal Application The HCI Terminal application (included on the BPA105 Bluetooth Protocol Analyzer product software disk) provides a hardware interface similar to the interface provided by an AT terminal application when communicating with a modem.
Page 37
NOTE. The HCI Terminal application and Bluetooth Neighborhood cannot be simultaneously. For error generation, you are advised to use the HCI terminal instead of Bluetooth Neighborhood. 1- 25 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 38
Acquiring Piconet Packet Data 1- 26 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
H Browse to the folder containing your saved acquisition files with the .data extension. H Select the file you want to open. H Click OK. 1- 27 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Figure 1- -10 identifies the functional areas available for data analysis. Menu bar Toolbars Tabs Columns List view Packet infoview Hex view Status bar Figure 1- 10: The Bluetooth Protocol Analyzer data analysis window 1- 28 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Analyzer application Edit > Add/Remove Bookmark Toggle a bookmark on or off for See page 2- -1. the packet that you have high- lighted in the List view. 1- 29 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 42
Hghlight the packets associated Fragmentation occurs when with the selected fragment. payload data is too large and must be segmented and trans- mitted in more than one packet. 1- 30 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 43
System > Tools menu. Default Return the factory default set- tings for the following: acquisi- tion setup, data files, pre- post- - trigger, error packet generation. 1- 31 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 44
See Figure 1- - 1 on page 1- - 4. Status bar Enable/disable the status bar. Log Toolbar Enable/disable the log toolbar. Contains navigation buttons. Log Statusbar Enable/disable the log statusbar. Displays packet information. 1- 32 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 45
Cascade Overlap all windows within the Application window from upper- left to lower-right. Tile Horizontally Adjust window size horizontally within the Application window and position them side-by-side. 1- 33 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Triggers tab to view the triggers that you have set up. Table 1- 3: Packet tabs Tab Icon Function Additional information Baseband View all baseband packets. See page 1- - 27. View all LMP packets. 1- 34 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 47
Columns. These columns reflect the elements that you configured in the View Setup, where you can decide which elements you want the List view to show. For additional information, see Setting Up an Acquisition on page 1- -9. 1- 35 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Wrap Payload Data is selected from the View menu). If you want to view the entire contents of a packet of any length, open a Hex view (View > Hex View) 1- 36 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Index field for the highlighted packet. See Figure 2- -1. Figure 2- 1: Analysis window showing bookmarked packets 2- 1 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Also, time is shown in timeticks (625 s per timetick). Figure 2- 2: Bookmarks dialog box To remove all bookmarks from the active List view, click the shortcut button. 2- 2 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
CRC. You can also generate error packets for any baseband packet, such as DM1, DM3, POLL, etc. Errors can be introduced as individual bits in the header, payload, or custom-defined bit positions of the packet. 2- 3 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
NOTE. If you want to generate an error using a setup that you previously created and saved, click Load. In the Open dialog box browse to the location and open your error packet generation file (*epg). 2- 4 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Figure 2- 4: Error Name drop-down list box 5. Click the shortcut button adjacent to the Error Names to display the custom error selection dialogs. See the examples in Figure 2- -5. 2- 5 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
3. Double-click on a packet type in the list box (or click Add) to incorporate a pattern into the sequence. You can select up to four patterns per defined sequence. 2- 6 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Repeat status (in the Error Packet Generator set up window), since this will result in a continuous, unrecoverable error. Instead, use the Number status and set the count to a desired value (for example, set the count to 5). 2- 7 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Following this error, Index 699 shows that the LMP_host_connection_req pattern was transmitted again but without the error. Figure 2- 8: Analyzer display of generated error 2- 8 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
LinkKey or PIN used during acquisition, or enter a LinkKey or PIN using the Decryption dialog box. This is explained in the Enable Decryption Procedure on page 2- -11. 2- 9 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 60
4. Once bonding is established between master and slave, you need to expire bonding to use decryption in Independent mode. Right-click the device bonded in Bluetooth Neighborhood and select expire bonding. 2- 10 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 61
H AM Address specific: Select Single session (default) or Multi session. H LinkKey/PIN: See Authentication/Pairing above. H Slave BD Address: Enter the address. H AM Address: Make a selection. 4. Click OK. 2- 11 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 62
Reference 2- 12 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Specifications listed in this section are guaranteed unless labeled “typical.” Typical specifications are provided for your convenience and are not guaranteed. The electrical characteristics listed in Table A- -1 are valid when the BPA105 Bluetooth Protocol Analyzer operates within the environmental conditions listed in Table A- -2.
Complies with RSS-210/RSS-139 of the Industry Canada. Australia/New Zealand Complies with EMC provision of Radiocommunications Act: AS/NZS 2064.1/2 Industrial, Declaration of Conformity - - EMC Scientific, and Medical Equipment:1992. A- 2 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Depth: 42 mm (1.625 in) Includes accessories and shipping container. Dimensions of Bluetooth air probe: 110 mm (4.250 in) 70 mm 42 mm (2.750 in) (1.625 in ) A- 3 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 68
Appendix A: Specifications A- 4 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
063-3469-xx. Includes BPA100 Bluetooth Protocol Analyzer User Manual (.pdf file). H Custom USB cable, Tektronix part number 174-4580-xx. H BPA100 Bluetooth Protocol Analyzer Installation Manual, Tektronix part number 071-0115-xx. B- 1 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 70
Appendix B: Accessories B- 2 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
CD 50 00 // Its starts | | it is reversed TXCMD 05 04 0C 38 93 00 CD 50 00 18 CC 00 00 00 00 WAITEVENT($03,20000,[TestError]) C- 1 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 73
// ROLE Switch this device becomes master //WAITEVENT($12,10000,[TestError]) delay(6000) // Wait for master to disconnect ACL connection // This device is master now so disconnect the connection C- 3 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 74
// Wait for events from master // When master is done add 1 SCO HV1 connection and disconnect it 5.5.18.1.4 & 5.5.18.1.10 // Establish ACL connection report( ) C- 4 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 76
// if you BD_Addr is 00 50 CD 00 93 11 then it should be reversed as 11 93 00 CD 50 00 // Its starts | | it is reversed C- 6 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 81
Bluetooth Device Class A parameter that indicates the type of device and the types of services that are supported. The class is received during the device discovery procedure. Glossary- 1 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 82
An estimate of the clock of another device. CLKN The native clock of a Bluetooth device. A slave device must add an offset to its own CLKN to synchronize with the master clock (CLK). Glossary- 2 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 83
SCO data and is never retransmitted; that is, the voice field is always new. The data field is checked for errors and is retransmitted, if necessary. Glossary- 3 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 84
1/3 FEC. HV2 packets carry 20 information bytes and are protected by 2/3 FEC. HV3 packets carry 30 information bytes and are not protected by FEC. HV packets do not have a CRC or payload header. Glossary- 4 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 85
Park Mode In the PARK mode, a device is still synchronized to the piconet but does not participate in the traffic. Parked devices have given up their MAC Glossary- 5 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 86
SDP is a Bluetooth-defined protocol provided for or available through a Bluetooth device. This protocol essentially is a means for applications to discover which services are available and to determine the characteristics of those available services. Glossary- 6 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 87
A single time slot in a Bluetooth system lasts 625 us. Acronym for Telephony Control (protocol) Specification. The TCS tab displays protocol discriminator, message type, and other data (depending upon the message type). Abbreviation for transmit. Glossary- 7 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Page 88
Glossary Glossary- 8 BPA105 Bluetooth Protocol Analyzer User Manual - - COMPANY CONFIDENTIAL 1/2001...
Need help?
Do you have a question about the BPA105 and is the answer not in the manual?
Questions and answers