Page 1 Hardware and Software User Manual Revision Date: 3/14/2017...
Page 2 The Bluetooth SIG, Inc. owns the Bluetooth® word mark and logos, and any use of such marks by Teledyne LeCroy, Inc. is under license. All other trademarks and registered trademarks are property of their respective owners. Frontline BPA 600 Hardware & Software User Manual...
Page 3: Table Of Contents
3.1.2 BPA 600 IO Datasource Settings 3.2 Decoder Parameters 3.2.1 Decoder Parameter Templates 3.2.2 Selecting A2DP Decoder Parameters 3.2.3 AVDTP Decoder Parameters 3.2.4 L2CAP Decoder Parameters 3.2.5 RFCOMM Decoder Parameters 3.3 Mesh Security 3.4 Conductive Testing Frontline BPA 600 Hardware & Software User Manual...
Page 4 4.4.5 Packet Error Rate - Sync Selected Packets With Other Windows 4.4.6 Packet Error Rate - Export 4.4.7 Packet Error Rate - Scroll Bar 4.4.8 Packet Error Rate - Excluded Packets 4.5 Bluetooth Audio Expert System™ 4.5.1 Supported Codec Parameters Frontline BPA 600 Hardware & Software User Manual...
Page 5 5.1.10 Subtleties of Timestamp Searching 5.2 Bookmarks 5.2.1 Adding, Modifying or Deleting a Bookmark 5.2.2 Displaying All and Moving Between Bookmarks Chapter 6 Saving and Importing Data 6.1 Adding Comments to a Capture File Frontline BPA 600 Hardware & Software User Manual...
Page 6 Contacting Frontline Technical Support Appendicies Appendix A: Application Notes A.1 Audio Expert System: aptX 'hiccup' Detected A.1.1 Background A.1.2 Test Setup A.1.3 Discussion A.1.4 Conclusions A.2 Getting the Android Link Key for Classic Decryption Frontline BPA 600 Hardware & Software User Manual...
Page 7 A.6.1 Introduction A.6.2 Why HCI Sniffing and Virtual Sniffing are Useful A.6.3 Bluetooth Sniffing History A.6.4 Virtual Sniffing—What is it? A.6.5 The Convenience and Reliability of Virtual Sniffing A.6.6 How Virtual Sniffing Works Frontline BPA 600 Hardware & Software User Manual...
Page 8 TELEDYNE LECROY A.6.7 Virtual Sniffing and Bluetooth Stack Vendors A.6.8 Case Studies: Virtual Sniffing and Bluetooth Mobile Phone Makers A.6.9 Virtual Sniffing and You Frontline BPA 600 Hardware & Software User Manual...
Page 9: Chapter 1 Frontline Hardware & Software
This manual is a user guide that takes you from connecting and setting up the hardware through all of the Frontline software functions for your Frontline hardware. Should you have any questions contact the Frontline Technical Support Team. Frontline BPA 600 Hardware & Software User Manual...
Page 10: What Is In This Manual
RAM: 4 GB Free Hard Disk Space on C: drive: 20 GB 1.3 Software Installation Download the installation software from FTE.com. Once downloaded, double-click the installer and follow the directions. Use this link: http://www.fte.com/bpa600-soft. Frontline BPA 600 Hardware & Software User Manual...
Page 11: Chapter 2 Getting Started
2.1 BPA 600 Hardware 2.1.1 Attaching Antennas When you remove the Frontline BPA 600 hardware from the box, the first step is to attach the antennas (Figure 2.1). Figure 2.1 - BPA 600 Antenna Connectors 1.
Page 12: Connecting/Powering The Frontline Bpa 600 Hardware
TELEDYNE LECROY Chapter 2 Getting Started 2.1.1.1 Status LED The Frontline BPA 600 has two Status LEDs on the RF panel. In the front panel center are the LOW ENERGY and BR/EDR LEDs. Figure 2.3 - BPA 600 Hardware LEDs Table 2.1 - Frontline BPA 600 LED Status...
Page 13: Data Capture Methods
BPA 600 software is run. Refer to on page 67 2.2 Data Capture Methods This section describes how to load TELEDYNE LECROY Frontline Protocol Analysis System software, and how to select the data capture method for your specific application. 2.2.1 Opening Data Capture Method On product installation, the installer creates a folder on the windows desktop labeled "Frontline <version #>".
Page 14 A checkbox labeled Create Shortcut When Run is located near the bottom of the dialog. This box is un-checked by default. Select this checkbox, and the system creates a shortcut for the selected method, and Frontline BPA 600 Hardware & Software User Manual...
Page 15: Frontline Bpa 600 Data Capture Methods
Figure 2.8 - BPA 600 Data Capture Dialog BR/EDR - low energy Air Sniffing This method requires one Frontline BPA 600 and is used to capture combined BR/EDR and Bluetooth® low energy data. Used for typical applications to capture Classic Bluetooth and Bluetooth low energy data.
Page 16: Frontline Probesync™ For Coexistence And Multiple Frontline Device Capture
Chapter 2 Getting Started Classic/low energy/802.11 Air Sniffing (optional) Two 802.11 and One BPA600 This method requires one Frontline BPA 600 and two Frontline 802.11 hardware. An Frontline 802.11 hardware is included with the Wi-Fi Option. Used for Bluetooth Classic/low energy/802.11 coexistence analysis.
Page 17: Control Window
I/O Settings - Opens settings Save - Saves the capture file. Clear - Clears or saves the capture file. Event Display - (framed data only) Opens a Event Display, with the currently selected bytes highlighted. Frontline BPA 600 Hardware & Software User Manual...
Page 18: Configuration Information On The Control Window
Not Active means that the analyzer is not currently capturing data. Paused means that data capture has been suspended. Running means that the analyzer is actively capturing data. % Used Frontline BPA 600 Hardware & Software User Manual...
Page 19: Frame Information On The Control Window
".frm file", the companion file to the ".cfa file". Recreating the ".frm file" helps ensure that the decoders will work properly. Reload Decoders The plug-ins are reset and received frames are decoded again. Frontline BPA 600 Hardware & Software User Manual...
Page 20 Bluetooth Protocol Expert System window Opens the Expert assist in the analysis of Bluetooth protocol issues. Audio Expert Audio Expert System window Opens the for the purpose System of detecting and reporting audio impairments. Frontline BPA 600 Hardware & Software User Manual...
Page 21 Begins data capture from the configured wireless devices. Stop Capture Stops data capture from the configured wireless devices. The following rows apply to all Frontline products Live Clear Shift- Clears or saves the capture file. Frontline BPA 600 Hardware & Software User Manual...
Page 22 Enable/Disable Bluetooth Protocol Expert When enabled, the is active, Bluetooth Protocol otherwise it is not available. Only available when a Expert Bluetooth Protocol Expert licensed device is connected. Frontline BPA 600 Hardware & Software User Manual...
Page 23: Minimizing Windows
Control window is minimized, all windows are minimized. 3. Select the menu item again to deactivate this feature. 4. The windows minimize to the top of the operating system Task Bar. Frontline BPA 600 Hardware & Software User Manual...
Page 24: Chapter 3 Configuration Settings
1. Make sure the cabling is attached to the ComProbe hardware. 2. Select Flash Device. The download begins, with the Status bar displaying the progress. When the download is complete, you can check the firmware version by checking the Status dialog. Frontline BPA 600 Hardware & Software User Manual...
Page 25: Bpa 600 Io Datasource Settings
In the following screen shot the phone has connected as the “Master” to the speaker as the “Slave”. Figure 3.4 - Arrow Shows master-slave Relationship Frontline BPA 600 Hardware & Software User Manual...
Page 26 The analyzer requires information on the clock synchronization method and the device address of the device to initially sync to. You must also choose what to sniff. Frontline BPA 600 Hardware & Software User Manual...
Page 27 Click this button to toggle on/off the display of the Channel Map. Channel Map Figure 3.7 - Classic Bluetooth Channel Map This display is used to determine which channels are available with Frontline BPA 600 Hardware & Software User Manual...
Page 28 3.1.2.4.1 BPA 600 Devices Under Test - LE Only By selecting the "LE Only" radio button under the "Devices Under Test" tab you can configure the BPA 600 protocol analyzer for sniffing Bluetooth low energy communications. Frontline BPA 600 Hardware & Software User Manual...
Page 29 The analyzer will capture packets from the first Master that makes a connection . To capture the advertising traffic and the connection(s), you must specify a device address. Specifying the LE Device Address and Encryption Frontline BPA 600 Hardware & Software User Manual...
Page 30 (remove invalid white spaces) to correctly format the key. 3. Enter a or out-of-band ( ) value for Pairing. This optional information offers alternative pairing methods. One of two pieces of data allow alternative pairing: Frontline BPA 600 Hardware & Software User Manual...
Page 31 In single connection mode, the analyzer needs to know the Bluetooth® Device Address (BD_ADDR) for each device, but it does not need to know which is master or slave, ComProbe analyzercan figure that Frontline BPA 600 Hardware & Software User Manual...
Page 32 If you choose to enter the Hex equivalent of the ASCII character PIN Code ABC, then select PIN Code (Hex) from the Encryption drop down list and enter 0x414243 in the field. Where 41 is the Hex Frontline BPA 600 Hardware & Software User Manual...
Page 33 3.1.2.4.3 BPA 600 Devices Under Test- Dual Mode Note: When selecting and using either "Dual Mode" or "Classic Only Multiple Connection" you must connect both antennas (LE and Classic) to the ComProbe BPA 600 hardware. Frontline BPA 600 Hardware & Software User Manual...
Page 34 In Dual Mode, the analyzer needs to know the Bluetooth Device Address (BD_ADDR) for each device, but it does not need to know which is master or slave for the Classic Bluetooth connection, ComProbe analyzser can figure that out for you through roleless connection. Frontline BPA 600 Hardware & Software User Manual...
Page 35 A, 42 is the Hex equivalent of the letter B, and 43 is the Hex equivalent of the letter C. Note: When PIN Code (Hex) is selected from the Encryption drop down list, the 0x prefix is entered automatically. Frontline BPA 600 Hardware & Software User Manual...
Page 36 (also encrypted with the short term key of course), so that the device which was in the slave Frontline BPA 600 Hardware & Software User Manual...
Page 37 3.1.2.4.4 BPA 600 Devices Under Test - Classic Only Multiple Connection Note: When selecting and using either Dual Mode or Classic Only Multiple Connection you must connect both antennas (LE and Classic) to the ComProbe BPA 600 hardware. Frontline BPA 600 Hardware & Software User Manual...
Page 38 Database. You can also type in the address as a 12 digit hex number (6 octets). The "0x" is automatically typed in by the control. Any devices entered this way is added to the Device Database. Frontline BPA 600 Hardware & Software User Manual...
Page 39 If the link key is already in the database, the Link Key is automatically entered in the edit box after the Master and Slave have been selected. You can also select a Master, Slave and Link Key from the Device Database. Frontline BPA 600 Hardware & Software User Manual...
Page 40 Protocol Analysis System software. In order to do this the user needs to know both addresses of the devices in the link for which they wish to update the link key. Also, the Datasource expects the master and slave addresses in LSB to MSB format. Frontline BPA 600 Hardware & Software User Manual...
Page 41 ::SendMessage(nHandle, WM_COPYDATA, (WPARAM)GetSafeHwnd(), (LPARAM)&ds); 3.1.2.5 BPA 600 Device Database The Device Database contains information about all the Classic Bluetooth® and Bluetooth low energy devices that have been discovered or entered by the user. Frontline BPA 600 Hardware & Software User Manual...
Page 42 For example, there would be a Service Class to identify a printer, and another Service Class to identify a stereo headset. If the device does not support EIR the field will be empty. Frontline BPA 600 Hardware & Software User Manual...
Page 43 Right-clicking anywhere in the device list will display the device control menu that will Select, Delete, or Add a device.. Clicking on one of these menu items will perform the following actions. Frontline BPA 600 Hardware & Software User Manual...
Page 44 Bluetooth low energy devices that have previously authenticated. Nickname A user-added name for the device, often used to make device identification easier during the analysis. Can be any alpha-numeric string. Frontline BPA 600 Hardware & Software User Manual...
Page 45 The current firmware is displayed under Firmware Version. 3.1.2.8 BPA 600 Advanced Classic Settings The Advanced Classic Settings dialog contains additional options for synchronizing the analyzer with the link to capture data. Frontline BPA 600 Hardware & Software User Manual...
Page 46 Frame Slicing Settings allows you to enter the size of the largest frame allowed to pass the analyzer without having any bytes removed. The second field tells the analyzer the number of Frontline BPA 600 Hardware & Software User Manual...
Page 47 Advanced button. Click on the Dircted Classic Connection check box to remove the check. Click on OK. The Classic Only Multiple Frontline BPA 600 Hardware & Software User Manual...
Page 48: Decoder Parameters
If you have decoders loaded which require decoder parameters, a window with one tab for every decoder that requires parameters appears the first time the decoder is loaded. Frontline BPA 600 Hardware & Software User Manual...
Page 49 Select the frame where the change should take effect Select Set Subsequent Decoder Parameters... from the Options menu, and make the needed changes. You can also right-click on the frame to select the same option. Frontline BPA 600 Hardware & Software User Manual...
Page 50: Decoder Parameter Templates
3.2.1 Decoder Parameter Templates 3.2.1.1 Select and Apply a Decoder Template 1. Select Set Initial Decoder Parameters... from the Options menu on the Control window or the Frame Display window. Frontline BPA 600 Hardware & Software User Manual...
Page 51 3.2.1.3 Deleting a Template 1. After opening the Set Initial Decoder Parameters window click the Delete button in the toolbar. The system displays the Template Manager dialog with a list of saved templates. Frontline BPA 600 Hardware & Software User Manual...
Page 52: Selecting A2Dp Decoder Parameters
3.2.3.1 About AVDTP Decoder Parameters Each entry in the Set Initial Decoder Parameters window takes effect from the beginning of the capture onward or until redefined in the Set Subsequent Decoder Parameters window. Frontline BPA 600 Hardware & Software User Manual...
Page 53 Add button. 6. AVDTP parameters are saved when the template is saved as described in on page 1 on page 1 Frontline BPA 600 Hardware & Software User Manual...
Page 54 1. Select the frame where the change should take effect. 2. Select Set Subsequent Decoder Parameters from the Options menu, or by selecting a frame in the frame display and choosing from the right-click pop-up menu, and make the needed changes. Frontline BPA 600 Hardware & Software User Manual...
Page 55 AVDTP parameters. Figure 3.26 - AVDTP Override of Frame Information, Item to Carry Frontline BPA 600 Hardware & Software User Manual...
Page 56: L2Cap Decoder Parameters
The L2CAP Set Initial Decoder Parameters dialog requires the following user inputs to complete a Parameter : Stream - This identifies the role of the device initiating the frame (master or slave) Channel ID - The channel number 0 through 78 Frontline BPA 600 Hardware & Software User Manual...
Page 57 3. Click on the ADD button. The Initial Connection window displays the added parameters. Figure 3.29 - Parameters Added to Decoder 4. To delete a parameter from the Initial Connections window, select the parameter and click on the Delete button. Frontline BPA 600 Hardware & Software User Manual...
Page 58: Rfcomm Decoder Parameters
Each entry in the Set Initial Decoder Parameters dialog takes effect from the beginning of the capture onward or until redefined in the Set Subsequent Decoder Parameters dialog. Figure 3.30 - RFCOMM parameters tab Frontline BPA 600 Hardware & Software User Manual...
Page 59 3.2.5.2 RFCOMM Missing Decode Information ComProbe software usually determines the protocol carried in an RFCOMM payload by monitoring previous traffic. However, when this fails to occur, the Missing Decoding Information Detected dialog appears Frontline BPA 600 Hardware & Software User Manual...
Page 60 4. Choose the protocol the selected item carries from the drop-down list, and click OK. Each entry in the Set Subsequent Decoder Parameters dialog takes effect from the specified frame onward or until redefined in this dialog on a later frame. Frontline BPA 600 Hardware & Software User Manual...
Page 61: Mesh Security
Three mesh keys shown. Note that "Sample5" and "Sample6" keys do not use the optional Device Key. [mesh] // Key Format - FriendlyName, IV-Index, App Key, Net Key, Dev Key (Optional) Frontline BPA 600 Hardware & Software User Manual...
Page 62 1. In the Frame Display, click on the Reload Decoders icon , or select Reload Decoders from the File menu. 2. From the File menu, select Recreate Companion Files. CSRmesh in BPA 600 Frontline BPA 600 Hardware & Software User Manual...
Page 63 The CSRMesh MASP tab is shown in CSRMesh MSRP tab with Decoder pane inset on page 56 shows the Decoder pane (inset) with the "Network Info" passphrase and network key shown but there is no network name. Frontline BPA 600 Hardware & Software User Manual...
Page 64 (inset) with the "Network Info" passphrase and network key and network name shown. The network name appears in the Network column of the Summary pane. Figure 3.35 - CSRMesh MCP tab with Decoder pane inset Troubleshooting Tips MeshOptions.ini Errors Frontline BPA 600 Hardware & Software User Manual...
Page 65 Message Authentication Code (MAC) is 8 bytes and Time to live (TTL) is 1 byte. HML payload is not available This error indicates that MTP payload contains MAC and TTL but HLM payload is missing or is 0 bytes. Frontline BPA 600 Hardware & Software User Manual...
Page 66: Conductive Testing
Caution: Good engineering judgment is essential to protecting both the Frontline low energy protocol analyzer and the devices under test from power levels that could cause damage. The procedures contained here are general guidelines for connecting the equipment for conductive testing. Frontline BPA 600 Hardware & Software User Manual...
Page 67: Bluetooth Low Energy Transmitter
2 SMA adapters for connecting coaxial cable or attenuators to the BPA 600 antenna connectors. Attenuators depending on the Bluetooth Class being tested. Frontline BPA 600 Dual Mode Bluetooth Protocol Analyzer Personal computer for running Frontline software. Test Set Up BPA 600 Conductive Test Setup on page 60 shows the test setup.
Page 68: Bluetooth Conductive Test Process
-20 dBm (10 μW) maximum. 3.4.4 Bluetooth Conductive Test Process After connecting DUT1, DUT2, and the Frontline Bluetooth protocol analyzer hardware, follow these steps to capture Bluetooth data. Frontline BPA 600 Hardware & Software User Manual...
Page 69 2. Establish data transmission between DUT 1 and DUT 2. 3. Begin capture of the data with the Frontline protocol analyzer. 4. Conduct protocol analysis with the Frontline software on the personal computer or save the capture file for future analysis. Frontline BPA 600 Hardware & Software User Manual...
Page 70: Chapter 4 Capturing And Analyzing Data
One estimate of indoor path loss, based on path loss data from a typical building, provides a power rule. At 2.4 GHz, the following relationship provides an approximate estimate of indoor path loss: This approximation is expected to have a variance of 13 dB. Frontline BPA 600 Hardware & Software User Manual...
Page 71 1 and 2 meters for Bluetooth transmitter classes 1 and 2. The distance for transmitter class 3 should be 1/2 meter. Figure 4.1 - Devices Equally Spaced in the Same Horizontal Plane Finally, eliminate other RF sources. Frontline BPA 600 Hardware & Software User Manual...
Page 72 Obstacles in close proximity to or in between the analyzer and the DUTs can interfere and cause reduction in signal strength or interference. Even small objects can cause signal scattering. Frontline BPA 600 Hardware & Software User Manual...
Page 73: Capturing Data With Bpa 600 Analyzer
Master (arrow tail) to Slave (arrow head). There are five states: Table 4.1 - BPA 600 Roleless Arrows Arrow Description Blue = synchronized with the Master clock - link active. Frontline BPA 600 Hardware & Software User Manual...
Page 74 If you choose Cancel, the dialog closes with no changes to the data. The link key/pin code can be changed while sniffing and the changes will be automatically saved in the configuration file. Frontline BPA 600 Hardware & Software User Manual...
Page 75 Follow the instructions in error message. To continue click on the OK button. The BPA 600 datasource Status window will also display a warning message suggesting information sources. Figure 4.5 - Incorrect ProbeSync Hardware Connection Error Frontline BPA 600 Hardware & Software User Manual...
Page 76: Combining Bpa 600, 802.11, And Hsu With Probesync
BPA 600 is always the "master" device and the first device in the chain, if being used. HSU is always the last "slave" device in the chain, if being used. HSU maximum capture data rate is 6 Mbit/sec. Frontline BPA 600 Hardware & Software User Manual...
Page 77 ComProbe 802.11 and HSU devices. On the 802.11 and HSU receiving the clock—cable connected to IN— the Start Sniffing button is disabled when using ProbeSync. In each ComProbe device's Control window status window will announce the synchronizing function. Frontline BPA 600 Hardware & Software User Manual...
Page 78: Extended Inquiry Response
Therefore, EIR can be used to determine whether a connection can/should be made to a device prior to making the connection. Frontline BPA 600 Hardware & Software User Manual...
Page 79: Protocol Stacks
You cannot select a stack or change an existing one for a capture file loaded into the Capture File Viewer (the Capture File Viewer is used only for viewing capture files and cannot capture data). Protocol Stack changes can only be made from a live session. Frontline BPA 600 Hardware & Software User Manual...
Page 80: Creating And Removing A Custom Stack
2. If your protocol stack is complete and there are no additional layers, click the There are no additional stack layers button. 3. If you select this option, the analyzer uses the stack you defined for every frame. Frames that do use this stack are decoded incorrectly. Frontline BPA 600 Hardware & Software User Manual...
Page 81: Reframing
In addition to choosing to Unframe, you can also be prompted to Unframe by the Protocol Stack Wizard. Frontline BPA 600 Hardware & Software User Manual...
Page 82: How The Analyzer Auto-Traverses The Protocol Stack
Frame Display window. These items are Set Initial Decoder Parameters, Automatically Request Missing Decoding Information, and Set Subsequent Decoder Parameters. (These items are not present if no decoder is loaded that supports this feature.) Frontline BPA 600 Hardware & Software User Manual...
Page 83: Analyzing Protocol Decodes
4.3 Analyzing Protocol Decodes 4.3.1 The Frame Display To open this window Click the Frame Display icon on the Control window toolbar, or select Frame Display from the View menu. Frontline BPA 600 Hardware & Software User Manual...
Page 84 - The Radix Pane displays the logical data bytes in the selected frame in either hexadecimal, decimal or octal. Binary Pane - The Binary Pane displays a binary representation of the logical data bytes. Frontline BPA 600 Hardware & Software User Manual...
Page 85 "No frame selected" when the selected frame is in the buffer (i.e. not wrapped out) but not accessible in the Summary pane. This can happen when a tab is selected that doesn’t filter in the selected frame. Frontline BPA 600 Hardware & Software User Manual...
Page 86 For example, If the first frame occurs more than 10 minutes in the past, the 10-minute utilization graph stays blank until a frame from 10 minutes ago or less is decoded. Frontline BPA 600 Hardware & Software User Manual...
Page 87 ToolTip pops up with the full text of the filter. The following icons all change how the panes are arranged on the Frame Display. Additional layouts are listed in the View menu. Frontline BPA 600 Hardware & Software User Manual...
Page 88 Frame Display Find. Find Next Occurrence - Moves to the next occurrence of the value in the Frame Display Find. Cancel Current Search - Stops the current Frame Display Find. Frontline BPA 600 Hardware & Software User Manual...
Page 89 2. Click the Set Protocol Filtering button on the Summary pane toolbar. In the Protocols to Hide box on the right, check the protocol layer(s) you want hidden. Click OK when finished. To reveal a hidden protocol layer: Frontline BPA 600 Hardware & Software User Manual...
Page 90 Figure 4.15 - Frame Display Find text entry field Where the more powerful Search/Find functionality searches the Decode, Binary, Radix, and Character panes on Frame Display using TImestamps, Special Events, Bookmarks, Patterns, etc., Frontline BPA 600 Hardware & Software User Manual...
Page 91 If you select Find Previous Occurrence, when the search reaches the first frame it will then cycle to the last frame and continue until it reaches the frame where the search began. Shift + F3 is a shortcut for Find Previous Occurrence. Frontline BPA 600 Hardware & Software User Manual...
Page 92 4.3.1.8 Working with Multiple Frame Displays Multiple Frame Displays are useful for comparing two frames side by side. They are also useful for comparing all frames against a filtered subset or two filtered subsets against each other. Frontline BPA 600 Hardware & Software User Manual...
Page 93 To re-size a pane, place the cursor over the pane border until a double-arrow cursor appears. Click and drag on the pane border to re-size the pane. 4.3.1.10 Frame Display - Byte Export The captured frames can be exported as raw bytes to a text file. Frontline BPA 600 Hardware & Software User Manual...
Page 94 Click the OK button to save the export. Clicking the Cancel button will exit Byte Export. 3. The Save As dialog will open. Select a directory location and enter a file name for the exported frames file. Frontline BPA 600 Hardware & Software User Manual...
Page 95 The Msg column in that case says “Transaction”. Each message in a transaction contains a packet identifier (PID). All of the PIDs in a transaction are shown in the transaction line. Frontline BPA 600 Hardware & Software User Manual...
Page 96 The tabs disappear when the capture buffer is cleared during live capture or when decoders are reloaded, even if one of the tabs is currently selected. They subsequently reappear as the corresponding events are detected. Frontline BPA 600 Hardware & Software User Manual...
Page 97 Finally, in a noisy environment it is also possible that the sniffer does not capture packets in the middle of a connection event. If this occurs and the sniffer cannot determine the side for the remaining packets in that connection event, the side is labeled ‘U’ for “unknown”. Frontline BPA 600 Hardware & Software User Manual...
Page 98 (for example) of a long header line so that the field is visible regardless of where the header is scrolled An added field can be removed from the Summary pane by selecting Remove New Column from the right-click menu. Frontline BPA 600 Hardware & Software User Manual...
Page 99 A green dot means the frame was decoded successfully, and the protocol listed in the Summary Layer drop-down box exists in the frame. No dot means the frame was decoded successfully, but the protocol listed in the Summary Layer drop-down box does not exist in the frame. Frontline BPA 600 Hardware & Software User Manual...
Page 100 Click the Toggle Expand Decode Pane icon to make the Decode pane taller. This allows for more of a lengthy decode to be viewed without needing to scroll. Frontline BPA 600 Hardware & Software User Manual...
Page 101 The Event, Radix, Binary, Character and Decode panes are all synchronized with one another. Clicking on an element in any one of the panes highlights the corresponding element in all the other panes. Frontline BPA 600 Hardware & Software User Manual...
Page 102 Red is reserved for bytes or frames with errors. In the Summary pane, frame numbers in red mean there is an error in the frame. Also, the Errors tab is displayed in red. This could be a physical error in a data byte or Frontline BPA 600 Hardware & Software User Manual...
Page 103 A Bluetooth connection: Displays only the frames associated with a Classic Bluetooth link or a Bluetooth low energy access address. A new Frame Display will open showing only the protocol tabs, frames, summary, and events associated with that particular Bluetooth connection. Frontline BPA 600 Hardware & Software User Manual...
Page 104 There are two steps to using a display filter. Define the filter conditions, and then apply the filter to the data set. The system combines both filter definition and application in one dialog. Frontline BPA 600 Hardware & Software User Manual...
Page 105 The filter also appears in the Quick Filtering and Hiding Protocols dialog. When a display filter is applied, a description of the filter appears to the right of the toolbar in the Frame Display windows. Notes: Frontline BPA 600 Hardware & Software User Manual...
Page 106 Frame Display window or select Apply/Modify Display Filters… from the filter menu to open the Set Condition dialog box. 2. Click the Advanced button on the Set Condition dialog box. Frontline BPA 600 Hardware & Software User Manual...
Page 107 OK. Figure 4.27 - Save Named Filter Condition Dialog The Set Condition dialog box closes, creates a tab on the Frame Display with the filter name, and applies the filter. Frontline BPA 600 Hardware & Software User Manual...
Page 108 Set Conditions dialog. Hiding a filter merely removes the filter from the display. A hidden filter can be reapplied using the Show/Hide procedure. Frontline BPA 600 Hardware & Software User Manual...
Page 109 4. Click OK. The Hide/Show Filters dialog box closes and the system reveals the filter in the Frame Display. You can also open the Quick Filter dialog and check the box next to the hidden filter to show or hide a display filter. Frontline BPA 600 Hardware & Software User Manual...
Page 110 If a display filter has two or more conditions you can delete conditions. If there is only one condition set in the filter you must delete the filter using Delete Display Filters… from the Filters menu. Frontline BPA 600 Hardware & Software User Manual...
Page 111 1. Select Rename Display Filters… from the Filter menu in the Frame Display window to open the Rename Filter dialog. The system displays the Rename Filter dialog with a list of all user defined filters in the Filters combo box. Frontline BPA 600 Hardware & Software User Manual...
Page 112 Classic Bluetooth: All will filter in all Classic Bluetooth frames. You are in effect filtering out any Bluetooth low energy frames and are selecting to filter in all the Classic Bluetooth links. Frontline BPA 600 Hardware & Software User Manual...
Page 113 Right-click anywhere in a Frame Display pane and select Connection Filter in the pop-up menu. The procedure for creating a connection filter are identical as described in From the Frame Display Filter menu, above. Frontline BPA 600 Hardware & Software User Manual...
Page 114 Clicking on Connection Filter Link = 4 will filter in "Link 4" frames without opening all the drop-down menus. Frontline BPA 600 Hardware & Software User Manual...
Page 115 The new Frame Display with the filtered connection frames will only contain the data defined by the filter criteria. That is, the criteria could be a single link or data for a particular technology. Frontline BPA 600 Hardware & Software User Manual...
Page 116 In this example, there is a capture file with Classic Bluetooth, Bluetooth low energy, and 802.11. To view just the 802.11 data set, 802.11 = All is selected from the right-click pop up menu. Frontline BPA 600 Hardware & Software User Manual...
Page 117 On the Frame Display , click the Quick Filtering icon or select Quick Filtering from the Filter menu. This opens a dialog that lists all the protocols discovered so far. The protocols displayed change depending on the data received. Frontline BPA 600 Hardware & Software User Manual...
Page 118 1. Select the tab of the desired protocol, or open the Summary combo box. 2. Select the desired protocol. 3. To filter on a different layer, just select another tab, or change the layer selection in the combo box. Frontline BPA 600 Hardware & Software User Manual...
Page 119: Bluetooth Timeline
Frame Display. The timelines provide a rich set of diverse information about Bluetooth packets, both individually and as a range. Information is conveyed using text, color, graphic size, line type, and position. Frontline BPA 600 Hardware & Software User Manual...
Page 120 Placing the mouse pointer on a packet displays information about that packet in an information box. Selecting a packet by clicking on it shows information about that packet above the timeline. Frontline BPA 600 Hardware & Software User Manual...
Page 121 FEC (if any) removed. It is the beginning portion of the “max actual payload reference” rectangle. If the actual payload is of max size, the entire “max actual payload reference” rectangle is colored. Frontline BPA 600 Hardware & Software User Manual...
Page 122 This table shows how packets are colored: Table 4.4 - Packet Type Colors Packet Category Packet Types Color DM1, DM3, DM5, DH1, Black 2-DH1, 3-DH1, DH3, 2-DH3, 3-DH3, DH5, 2-DH5, 3-DH5, AUX1 HV1, HV2, HV3, DV Pink Frontline BPA 600 Hardware & Software User Manual...
Page 123 Previous Packet is not. A single packet is selected either by clicking on it, navigating to it, or selecting it in the Frame Display. Selecting a packet activates Previous Packet. Frontline BPA 600 Hardware & Software User Manual...
Page 124 Packet Timeline display. This does not affect the data in Frame Display. Resetting the display may be useful when the most recent throughput values are of interest. Frontline BPA 600 Hardware & Software User Manual...
Page 125 The Bluetooth Timeline menu bar contains the following: Table 4.6 - Bluetooth Timeline Menus Menu Selection Description File Reset Resets Timeline to display beginning at current frame. Available only in Live mode. Exit Closes the timeline window Frontline BPA 600 Hardware & Software User Manual...
Page 126 Displays 1764 slots (42x42) 2304 Slots Displays 2304 slots (48x48) 2916 Slots Displays 2916 slots (54x54) 3600 Slots Displays 3600 slots (60x60) 4356 Slots Displays 4356 slots (66x66) 5184 Slots Displays 5184 slots (72x72) Frontline BPA 600 Hardware & Software User Manual...
Page 127 Stats Assumes at most one object transfer per capture. Displays Bluetooth Timeline help topics. Help Help Topics 4.3.2.5 Bluetooth Timeline Visual Elements The Bluetooth Timeline consists of the following visual elements: Frontline BPA 600 Hardware & Software User Manual...
Page 128 Zoom Tools: Zoom tools zoom in or out while maintaining the position on the screen of the area under the zoom tool. This makes it possible to zoom in or out for a specific packet or area of the timeline. See Bluetooth Timeline Zooming on page 121 Frontline BPA 600 Hardware & Software User Manual...
Page 129 Total time is calculated by taking the difference in timestamps between the first and last packet. In Bluetooth, timestamp difference is used instead of Bluetooth clock count because timestamp difference is immune to Frontline BPA 600 Hardware & Software User Manual...
Page 130 Duration for average throughput is beginning of first packet to end of last packet. If a single packet is selected, the duration of that packet is used. Average throughput can be nonzero when a single packet is selected. Frontline BPA 600 Hardware & Software User Manual...
Page 131 This can also result in the total duration of the two throughput graphs being different. Frontline BPA 600 Hardware & Software User Manual...
Page 132 The file contains the following information: Name Length (bytes) Connection Packet Number Begin Transfer Packet Number End Transfer Packet Number Disconnection Packet Number Connection Duration (Fractional Seconds) Frontline BPA 600 Hardware & Software User Manual...
Page 133 Note: The raw timestamp value is the number of 100-nanosecond intervals since the beginning of January 1, 1601. This is standard Windows time. Frontline BPA 600 Hardware & Software User Manual...
Page 134: Low Energy Timeline
The timeline also provides selected information from Frame Display. The timeline provides a rich set of diverse information about low energy packets, both individually and as a range. Information is conveyed using text, color, packet size, and position. Frontline BPA 600 Hardware & Software User Manual...
Page 135 Table 4.7 - Bluetooth low energy Timeline Toolbar Icon Description Lock - The Lock button only appears in live mode and is automatically depressed when the user scrolls. Unlock First Packet Previous Packet Next Packet Last Packet Frontline BPA 600 Hardware & Software User Manual...
Page 136 The source device address will appear on the left of each row. Show Radio Rows Displays rows packets received on radios 0,1, or 2. The radio number will appear on the left of each row. Frontline BPA 600 Hardware & Software User Manual...
Page 137 12 segments, 6 markers per segment 202.5 ms (162 1.25 ms time intervals 18 segments, 9 markers per segment (18x9)) 360 ms (288 1.25 ms time intervals 24 segments, 12 markers per segment (24x12)) Frontline BPA 600 Hardware & Software User Manual...
Page 138 78 segments, 39 markers per segment (78x39)) 4.41 s (3528 1.25 ms time intervals 84 segments, 42 markers per segment (84x42)) 5.0625 s (4050 1.25 ms time intervals 90 segments, 45 markers per segment (90x45)) Frontline BPA 600 Hardware & Software User Manual...
Page 139 Capture will continue but the displays will remain static. To resume scrolling during capture, click again on this menu item. Displays Bluetooth low energy Timeline help Help Help Topics topics. Frontline BPA 600 Hardware & Software User Manual...
Page 140 1-second throughput can be very small since it divides by an entire one second. 4.3.3.7 Throughput Graph The following figure depicts the Throughput Graph. Frontline BPA 600 Hardware & Software User Manual...
Page 141 Frame Display. 1. Using the Decoder pane scroll through the frames until LE Data shows "Encrypted MIC". 2. Place the cursor on the Encrypted MIC data and while holding the Frontline BPA 600 Hardware & Software User Manual...
Page 142 Within each segment are one or more source access address or radio rows. Figure 4.46 - Bluetoothlow energy Timeline 4.3.3.9 How Packets Are Displayed Bluetooth low energy packets are displayed in the low energy timeline in Segments and Rows. Frontline BPA 600 Hardware & Software User Manual...
Page 143 The Addr rows display packets sent by that access address for all devices or configured devices. You select All Devices or Configured Devices using the radio buttons.The address shown is the access address for the device. Frontline BPA 600 Hardware & Software User Manual...
Page 144 Timeline. If not, those values are shown as “n/a”. Packets that are not displayed in the Timeline are Sniffer Debug packets, non-LE packets (e.g. WiFi), and packets that are not from a Configured Device the Configured Devices radio button is checked. Frontline BPA 600 Hardware & Software User Manual...
Page 145 When showing multiple segments the beginning timestamp is the same as the ending timestamp of the previous segment. In addition to the timestamps the segment information bar shows the zoom value in the center of the bar. Frontline BPA 600 Hardware & Software User Manual...
Page 146 Discontinuities - Discontinuities are indicated by cross-hatched slots. See the Discontinuities section. Packet Status - Packet status is indicated by color codes. Refer to low energy Timeline Legends. Right-Click Menu. - The right-click menu provides zooming and time marker alignment. Frontline BPA 600 Hardware & Software User Manual...
Page 147 The timestamp will change with the scrolling of the display. Frontline BPA 600 Hardware & Software User Manual...
Page 148 Selecting a Zoom icon (+ or -) on the toolbar zooms in our out. The current Zoom setting is shown in the center of the timeline segment information bar at the bottom of each timeline segment. Frontline BPA 600 Hardware & Software User Manual...
Page 149 (Contiguous time segment x/n)" where "x" is 1,2, 3... segment and "n" is the total number of segments. For example: :"(Contiguous time segment 2/3)". 4.3.3.15 Zoom menu Figure 4.56 - low energy Timeline Zoom menu Frontline BPA 600 Hardware & Software User Manual...
Page 150 Zoom Menu Multiple Segment: Each selection defines the timeline view port, the number of segments, and number of 1.25 ms markers withing the segment. For example, selecting "7.5 ms (6 1.25 ms time intervals Frontline BPA 600 Hardware & Software User Manual...
Page 151: Coexistence View
Coexistence View Menus. Table 4.9 - Coexistence View File Menu Selections Selection Description Reset Resets the Coexistence View window to its default settings. Exit Closes the Coexistence View window. Frontline BPA 600 Hardware & Software User Manual...
Page 152 Tx packet and is shown with a purple border in the timelines. Performs the same function as the SET button. Refer on page 160 The following three selections are mutually exclusive. Frontline BPA 600 Hardware & Software User Manual...
Page 153 Graph When not checked, the Throughput Graph appears in its default position at the top of the window. Performs the same function as clicking the Swap button. See on page 156. Frontline BPA 600 Hardware & Software User Manual...
Page 154 Zoom Tool (Mouse Wheel Zooms- Ctrl Key When checked, sets the mouse wheel to zoom Switches to Scroll Tool) the Viewport. Pressing the Ctrl key while zooming switches to scrolling the Viewport. Frontline BPA 600 Hardware & Software User Manual...
Page 155 4 sec (6,400 Bluetooth slots) 5 sec (8,000 Bluetooth slots) 10 sec (16,000 Bluetooth slots) 20 sec (32,000 Bluetooth slots) Note: Right-clicking anywhere in the Coexistence View window will open the Zoom menu in a pop-up. Frontline BPA 600 Hardware & Software User Manual...
Page 156 When clicked, selects the first prior packet Ctrl+Left Arrow Error Packet with an error from the current selection and displays it in the Timeline. Performs the same function as the Previous Error Packet button. Frontline BPA 600 Hardware & Software User Manual...
Page 157 Packet selection is inactive. 4.3.4.2 Coexistence View - Toolbar Figure 4.58 - Coexistence View Toolbar The toolbar contains the following selections: Table 4.13 - Coexistence View Toolbar icons Icon Description Move to the first packet. Frontline BPA 600 Hardware & Software User Manual...
Page 158 Zoom out. Scroll cursor. When selected the cursor changes from Scroll to a context-aware zooming cursor. Click on normal cursor to remove the zooming cursor. Zooming cursor. Scroll Lock/Unlock during live capture mode. Frontline BPA 600 Hardware & Software User Manual...
Page 159 Duration of the included packets is measured from the beginning of the first included packet to the end of the last included packet. 4.3.4.5 Radio Buttons The radio buttons above the throughput indicators specify which packets are included. Radio button descriptions are modified per the following: Frontline BPA 600 Hardware & Software User Manual...
Page 160 1 second throughput, except that Bluetooth low energy packets from non-configured devices can be excluded as noted above. Figure 4.61 - Throughput Graph viewport. Frontline BPA 600 Hardware & Software User Manual...
Page 161 The data lines and y-axis labels are color-coded: Blue = Classic Bluetooth, Green = Bluetooth low energy, Orange = 802.11. Each data point represents a duration which is initially 0.1 s. Each time the number of data Frontline BPA 600 Hardware & Software User Manual...
Page 162 Figure 4.66 - Data point tooltip The Throughput graph tool tips can be shown in the upper-left corner of your computer screen to provide an unobstructed view. Refer to Relocating Tool Tips. Frontline BPA 600 Hardware & Software User Manual...
Page 163 Timeline. The packet range that occurs within this time range is shown above the sides of the viewport. Frontline BPA 600 Hardware & Software User Manual...
Page 164 The Throughput Graph and Timeline can be made to trade positions by clicking the Swap button. Clicking the Swap button swaps the positions of the Throughput Graphs and the Timelines. Figure 4.70 - Small Timeline and large Throughput Graph after pressing the Swap button. Frontline BPA 600 Hardware & Software User Manual...
Page 165 Timelines are synchronized with the Throughput Graph’s viewport. The viewport is sized by dragging one of its sides or by using one of the other zooming techniques listed in the Zooming subsection in the Timelines section. Frontline BPA 600 Hardware & Software User Manual...
Page 166 (the name of the button changes to Unfreeze Y and a Y Scales Frozen indicator appears to the right of the title. Clicking the Unfreeze Y button unfreezes the y-axis scales. Figure 4.74 - Zoomed Throughput Graph- Largest Value Snaps to Top Frontline BPA 600 Hardware & Software User Manual...
Page 167 Another factor that can affect total duration is that the BluetoothTimeline's Throughput Graph stops at the last Classic Bluetooth packet while the Coexistence View’s Throughput Graph stops at the last packet regardless of technology. Frontline BPA 600 Hardware & Software User Manual...
Page 168 Set button is clicked. Also listed is the last source MAC address that was set in the dialog in the previous session. If that address has not yet been seen in this session, it is shown in parentheses. Figure 4.76 - 802.11 Source Address Dialog Frontline BPA 600 Hardware & Software User Manual...
Page 169 The All radio button shows and uses all Bluetooth low energy packets. The Configured radio button shows and uses only Bluetooth low energy packets which come from a configured device. 4.3.4.25 Coexistence View – Legend (This video provides more details on the Legend...) Frontline BPA 600 Hardware & Software User Manual...
Page 170 Packet information is provided in various ways as described below. Packets are color-coded to indicate attribute (Retransmit, Bad Packet, Can’t Decrypt, or Invalid IFS), master/Tx, technology (Classic Bluetooth® , Bluetooth low energy, or 802.11), and category/type. Frontline BPA 600 Hardware & Software User Manual...
Page 171 (duration between the first and last selected packets), Timestamp Delta (difference between the timestamps, which are at the beginning of each packet), and Span (duration from the beginning of the first selected packet to the end of the last selected packet). Frontline BPA 600 Hardware & Software User Manual...
Page 172 You can relocate the tool tip for convenience or to see the timeline or throughput graph unobstructed while displaying packet information. In the Format menu select Show Tooltips in Upper-Left Corner of Screen, and any time you mouse-over a packet the tool tip will appear anchored in the Frontline BPA 600 Hardware & Software User Manual...
Page 173 To return to viewing the tool tip adjacent to the packets deselect the tool tip format option in the menu. Figure 4.86 - Coexistence View Format Menu - Show Tooltips on Computer Screen Frontline BPA 600 Hardware & Software User Manual...
Page 174 There are two Timelines available for viewing, one for the 5 GHz range and one for the 2.4 GHz range. Classic Bluetooth and Bluetooth low energy occur only in the 2.4 GHz range. 802.11 can occur in both. Figure 4.88 - 5 GHz and 2.4 GHz 802.11 packets Frontline BPA 600 Hardware & Software User Manual...
Page 175 The ‘i’ buttons bring up channel information windows, which describe channel details for each technology. They make for interesting reading. Figure 4.89 - 5 GHz information window Figure 4.90 - 2.4 GHz information windows Frontline BPA 600 Hardware & Software User Manual...
Page 176 Bluetooth slot (625 µs) in width. A discontinuity for a timestamp going backward is called a negative discontinuity and is shown in red. A discontinuity for a timestamp going forward by more than 4.01 s is Frontline BPA 600 Hardware & Software User Manual...
Page 177 7.19984 s of absolute time as shown by the Gap value in the header. So the absolute time is 7.21484 s: Zoom level duration – Bluetooth slot duration + Gap duration = 15.625 ms - 625 µs + 7.19984 s = 0.015625 s – 0.000625 s + 7.199840 s = Frontline BPA 600 Hardware & Software User Manual...
Page 178 Captured packets that don’t contain a channel number, such as HCI and BTSnoop, will not be displayed. When no packets have a channel number the Coexistence View Throughput Graph and Timelines will display a message: "Packets without a channel number (such as HCI) won't be shown." Frontline BPA 600 Hardware & Software User Manual...
Page 179 High Speed mode. 1. Click on the Control window File menu and select Close. 2. The Control window will open again. Click on the Control Window File menu and select Go Live (High-Speed Mode) Frontline BPA 600 Hardware & Software User Manual...
Page 180: Message Sequence Chart (Msc)
MSC displays a concise overview of a Blutetooth connection, highlighting the essential elements fo the connection. At a glance, you can see the flow of the data including role switches, connection requests, and Frontline BPA 600 Hardware & Software User Manual...
Page 181 Click here to learn more about this option. If there is both Classic and low energy packets, there will be a Classic and LE tab at the top of the dialog. Figure 4.100 - Classic and LE tabs Frontline BPA 600 Hardware & Software User Manual...
Page 182 Additionally, If you right click on a message description, you will see the select Show all Layers button. When you select Show all Layers, the chart will display all the messaging layers. The Frame# and Time of the packets are displayed on the left side of the chart. Frontline BPA 600 Hardware & Software User Manual...
Page 183 Ctrl Summary When you select the Ctrl Summary tab you will see a summary of the control and signaling frames in the order that they are received/transmitted from and to devices. Frontline BPA 600 Hardware & Software User Manual...
Page 184 If you right click within the Ctrl Summary, you can select Show in MSC. Figure 4.105 - Right-Click in Ctrl Summary to Display Show in MSC The window then displays the same information, but in the normal MSC view. Frontline BPA 600 Hardware & Software User Manual...
Page 185 Zoom in horizontal - expands the chart horizontal view Shift + H Zoom out horizontal - compresses the chart horizontal view Ctrl + V Zoom in vertical - expands the chart vertical view Frontline BPA 600 Hardware & Software User Manual...
Page 186 When you select the 1) Search icon or 2) use F3 key, the Select layer and message dialog appears. From this dialog you can search for specific protocol messages or search for the first error frame. Frontline BPA 600 Hardware & Software User Manual...
Page 187 2. Enter a frame number in the Enter frame No.: text box. 3. Click OK. The Go To Frame dialog disappears and the selected frame is highlighted in the chart. Frontline BPA 600 Hardware & Software User Manual...
Page 188 2. You next need to select your printer from the drop-down list, set printer properties, and format the print output.. 3. Then you select OK. After you select OK, the Message Sequence Chart Print Preview dialog appears. Frontline BPA 600 Hardware & Software User Manual...
Page 189 Current Page page number this is currently shown in the dialog. You can enter a number in the text box, then press Enter, and the dialog will display the data for that page. Frontline BPA 600 Hardware & Software User Manual...
Page 190: Packet Error Rate Statistics
Bluetooth low energy by selecting the Bluetooth low energy Packet Error Rates Statistics icon from the Control window or Frame Display. You can also open the window from the View menu on the same windows. Frontline BPA 600 Hardware & Software User Manual...
Page 191: Packet Error Rate - Channels (Classic And Low Energy)
4.4.1 Packet Error Rate - Channels (Classic and low energy) The main portion of the PER Stats dialog displays the 79 individual channels, 0-78, for Classic Bluetooth® 40 individual channels, 0-39, for Bluetooth low energy. Frontline BPA 600 Hardware & Software User Manual...
Page 192 For Classic Bluetooth: Each channel contains a bar that displays the number of packets with no errors in green, packets with Header Errors in red, packets with Payload or CRC errors in dark red, and Retransmitted packets in yellow. Frontline BPA 600 Hardware & Software User Manual...
Page 193: Packet Error Rate - Pie Chart And Expanded Chart
The number of the selected channel is displayed in the upper-left corner of the expanded chart. The combined value of Header and Payload/CRC errors for the channel is displayed in red as a percentage to the right of the channel number. Frontline BPA 600 Hardware & Software User Manual...
Page 194: Packet Error Rate - Legend
Total packets and Total percentage is displayed in light blue. For Bluetooth low energy: The number of Packets with No Errors and percentage of packets with No Errors in relationship to total packets for the channel is displayed in green. Frontline BPA 600 Hardware & Software User Manual...
Page 195: Packet Error Rate - Additional Statistics
Frame Display in that selecting a frame range in one does not highlight the same frame range in the other. This ensures that Frame Display isn’t constantly re-synchronizing during live capture Frontline BPA 600 Hardware & Software User Manual...
Page 196: Packet Error Rate - Export
Each time the bars cycle to the middle, the time they represent doubles. When the bars move and the Viewport (see below) is not maximized, the Viewport Frontline BPA 600 Hardware & Software User Manual...
Page 197 The Scroll bar includes inapplicable packets (sniffer debug, WiFi, etc) so that the packet range selected in Frame Display can be shown. Inapplicable packets are not, however, included in the statistics reports. Frontline BPA 600 Hardware & Software User Manual...
Page 198: Packet Error Rate - Excluded Packets
The primary goal of the Audio Expert System™ is to expedite the detection and resolution of Bluetooth protocol related audio impairments. To achieve this, the system automatically identifies audio impairments and reports them to a user as “events”. It also Frontline BPA 600 Hardware & Software User Manual...
Page 199 Reference mode detects a larger number of events because the reference audio has specific frequency, amplitude, and duration occurring at known points in time allowing for precise comparison. Frontline BPA 600 Hardware & Software User Manual...
Page 200: Supported Codec Parameters
Sampling Rate: 16 kHz Allocation method: Loudness Subbands: 8 Block Length: 15 Bitpool: 26 4.5.2 Starting the AudioExpert System (BPA 600 only) To use the Audio Expert System™, the user must have Frontline BPA 600 Hardware & Software User Manual...
Page 201: Operating Modes
Frontline hardware, with Audio Expert System™ license installed, connected to the PC. This is a requirement for both live capture and when viewing a saved capture file. For live capture, set up the Frontline BPA 600 datasource and begin capturing data. Note: Proper positioning of the Frontline hardware relative to the devices under test (DUT1-source, DUT2-sink) will contribute to effective data capture.
Page 202 The system starts up in Non-Referenced mode, and is continuously looking for a valid Reference Audio file by measuring frequency and amplitude of the received over-the-air audio. Transitioning to Referenced mode requires the successful detection of a Test ID tone sequence of proper frequency, duration, and value. Frontline BPA 600 Hardware & Software User Manual...
Page 203 Commonly, in Bluetooth technology the music sent via A2DP and speech sent via HFP. There are a few ways Frontline BPA 600 Hardware & Software User Manual...
Page 204 Playing the test file using Third party Apps Bluetooth Audio Expert System™ Reference mode testing can be accomplished using third party apps on Android, iOS, and Windows phones. The following apps are available from their respective App stores: Frontline BPA 600 Hardware & Software User Manual...
Page 205 Teledyne LeCroy does not provide support or maintenance for third party apps. Any issues or questions should be directed to the app developer.
Page 206 Interface (UI) looks identical to the one shown below with respect to maximum levels. In particular, there are three segments in this test whose peaks are at exactly -6 dBFS. That is, there is zero loss or gain through the chain. Frontline BPA 600 Hardware & Software User Manual...
Page 207 Example 2: For the case where the Info1 parameter Chanel Gain Speech 0 dB -12 dB is converted to “Channel Gain”, if the audio is music Music 0 dB -17 dB (i.e. transported via an A2DP connection), then a Frontline BPA 600 Hardware & Software User Manual...
Page 208: Audio Expert System™ Event Type
Fragmented AVDTP packet not terminated before sending next packet. A2DP Error Invalid AVDTP transaction ID. A2DP Error Missing AVDTP command response. A2DP Error Unrecognized A2DP content protection type. A2DP Error Attempt to configure delay reporting during incorrect stream state. Frontline BPA 600 Hardware & Software User Manual...
Page 209 Error Incorrect Configuration mSBC Codec detected a change in audio Detected parameters mSBC Error Lost Sync mSBC Codec expected to find synch word: 0xAD instead found: 0x: typically due to corrupted data Frontline BPA 600 Hardware & Software User Manual...
Page 210 This typically occurs when there isn’t any configuration information available. AptX Information Codec initialization Codec session started AptX Information Codec tear-down Codec session ended AptX Error Bad Data Non-stereo data has been detected for incoming data stream. Frontline BPA 600 Hardware & Software User Manual...
Page 211 The volume threshold above which useful audio analysis is possible. High Volume Threshold for speech: - 6dBFS High Volume Threshold for music: -12 dBFS Frontline BPA 600 Hardware & Software User Manual...
Page 212 200 and 290 Hz, and is followed either by a 1 kHz delimiter tone or a 400 Hz Test ID terminator. The digit ‘0’ is represented by 200 Hz, the digit ‘1’ by 210 Hz, and so on, up to the digit ‘9’ represented by 290 Hz. Frontline BPA 600 Hardware & Software User Manual...
Page 213 5% to 10%. Note that this event will result in an attempt to resynchronize if the measured duration is greater than expected. The system calculates amplitude fluctuations as: (Max Level – Min Level) / (Max Level + Min Level) * 100 Frontline BPA 600 Hardware & Software User Manual...
Page 214 Reported when a CVSD encoded audio stream is Referenced Error CVSD HF Level detected and there is high frequency energy above Too High 4 kHz that is greater than -20 dBFS. Frontline BPA 600 Hardware & Software User Manual...
Page 215 Note that the system does not report dropouts that begin at very low energy levels. Figure 4.122 - Dropout: Measurement and Silence Threshold Glitch Frontline BPA 600 Hardware & Software User Manual...
Page 216: Audio Expert System™ Window
There is an Event Timeline in each Wave Panel. Event Table – A tabular listing of Bluetooth, codec, and audio events with information on event severity, related Bluetooth frame, timestamp, and event information. Figure 4.123 - Audio Expert System™ Window Frontline BPA 600 Hardware & Software User Manual...
Page 217 Toggles to Pause when clicked. Pause: Stops audio play back at its current position, toggles to Play when clicked. End: Moves the play cursor to the end of the waveform Frontline BPA 600 Hardware & Software User Manual...
Page 218 Wave Panels or all the Wave Panels. This button also lets user export Event Table data in .csv format. Refer to Waveform Export Audio Data for more details . Frontline BPA 600 Hardware & Software User Manual...
Page 219 The play cursor appears as a white vertical line across the waveform. 4. Event Timeline that shows color coded Bluetooth , Codec , and Audio events. Details of these events are listed in the Audio Expert System™ Event Table. Frontline BPA 600 Hardware & Software User Manual...
Page 220 SBC parameters can be used. The pop-up is visible as long as the cursor hovers over the Codec tag. Figure 4.126 - SBC Codec Information Pop-Up on Cursor Hover Over Frontline BPA 600 Hardware & Software User Manual...
Page 221 When the top image is visible, clicking on it will collapse the Wave Panel to the minimum size that shows only the Stream Info and the Local Controls. When the bottom image is visible, clicking on it expands the Wave Panel to full size. Figure 4.128 - Collapsed Wave Panel Frontline BPA 600 Hardware & Software User Manual...
Page 222 To drag the Play Cursor, hover the mouse cursor over the Play Cursor until the mouse cursor changes to a pointing hand; click and drag the cursor to a new position. Frontline BPA 600 Hardware & Software User Manual...
Page 223 219. Selecting Zoom to Selection will expand the selection to the full width of the Wave Panel. Other selection option in the pop up are Select Area, Clear Selection, and Copy Selection. Actual Bitrate Overlay Display Figure 4.131 - Actual Bitrate Overlay Frontline BPA 600 Hardware & Software User Manual...
Page 224 This example shows that event 159 was selected in the Event Table resulting in the severity icon being enlarged in the Event Timeline. The system automatically selected the surrounding area—the blue outline. Frontline BPA 600 Hardware & Software User Manual...
Page 225 The event icon in the Event Timeline is also centered and the selected icon will be larger than the non-selected event icons. Selecting one or more Frontline BPA 600 Hardware & Software User Manual...
Page 226 Mode does not apply to this event. Referenced Mode. Refer to 4.5.3.2 Referenced Mode on page Non-Referenced Mode. Refer to 4.5.3.1 Non-Referenced Mode UN-REF on page 193 Frame Number integer The system generated identification for a specific frame. Frontline BPA 600 Hardware & Software User Manual...
Page 227 Right-clicking anywhere in the Wave Panel will provide you with a selection of the following actions. Table 4.33 - Wave Panel Pop-up Menu Selections Option Description Clear Selection Clears the current selection in the viewer Frontline BPA 600 Hardware & Software User Manual...
Page 228 .csv file. For additional details on exporting refer Event Table Export. Loop Loops through the audio selected on the Wave Panel. Zoom to Selection Expands the Event Table selection to fill the Wave Panel view. Frontline BPA 600 Hardware & Software User Manual...
Page 229 You can check each stream that is to be exported. For convenience checking Select all below the stream list window will place checks in all streams. Export Options After selecting the streams to export, select the desired formats to export. Frontline BPA 600 Hardware & Software User Manual...
Page 230: Frame, Packet, And Protocol Analysis Synchronization
When a frame is selected in any Frontline software data views, the corresponding audio data associated with those frames is also selected in the Wave Panel, Event Timeline and Event Table and vice- verse. Frontline BPA 600 Hardware & Software User Manual...
Page 231: Bluetooth Protocol Expert System
Bluetooth Protocol Expert System Window is opened by clicking on on the Control window toolbar. If the Set in Target hardware is not licensed for Bluetooth Protocol Expert System, a tooltip will appear with Frontline BPA 600 Hardware & Software User Manual...
Page 232: Bluetooth Protocol Expert System Window
Statistics will vary depending on the protocol. Protocol Displays the Bluetooth protocol warnings and errors. Clicking on an event will select Events the associated protocol tab in the Statistics pane. Frontline BPA 600 Hardware & Software User Manual...
Page 233 TELEDYNE LECROY Chapter 4 Capturing and Analyzing Data Figure 4.138 - Bluetooth Protocol Expert System Window Frontline BPA 600 Hardware & Software User Manual...
Page 234 The tabs across the top list the links, protocols, or connections. Details are contained with the Figure 4.140 - Bluetooth Protocol Expert System Statistics Pane Frontline BPA 600 Hardware & Software User Manual...
Page 235 Remote device Protocol and Service Multiplexer. Data Transmitted Data Received Transmit Mps Receive Mps Transmit Window Receive Window Number of Retransmissions Active Error Count Number of errors associated with this L2CAP Id . Frontline BPA 600 Hardware & Software User Manual...
Page 236 4.6.2.3 Expert System Protocol Events Pane Bluetooth protocol events that generate a warning or an error in the expert system are listed in the Protocol Events pane. Events are listed in the order that they occur. Frontline BPA 600 Hardware & Software User Manual...
Page 237 Scroll Scrolls to the point on the scroll pane where the Here mouse was last positioned. Left/Right Scrolls the table to the beginning (left edge) or to Edge the end (right edge) Frontline BPA 600 Hardware & Software User Manual...
Page 238 2. If the arrow head is pointing up, the column is sorted in ascending order. If the arrow head is pointing down the column is sorted in descending order. Frontline BPA 600 Hardware & Software User Manual...
Page 239 Figure 4.141 - Sorting Id Ascending Figure 4.142 - Sorting Air Mode Ascending; Note Id Sort Figure 4.143 - Sorting Air Mode Descending; Note how other columns follow. Frontline BPA 600 Hardware & Software User Manual...
Page 240: Analyzing Byte Level Data
Event Display will also select the related frame in the Frame Display and the related message in the Message Sequence Chart. 4.7.2 The Event Display Toolbar Home – Brings the Control window to the front. Frontline BPA 600 Hardware & Software User Manual...
Page 241 Number Only - Controls whether the analyzer displays data in both character and number format, or just number format. Click once to show only numeric values, and again to show both character and numeric values. Frontline BPA 600 Hardware & Software User Manual...
Page 242: Opening Multiple Event Display Windows
2. Use the mouse to select the data you want to calculate a delta time and rate for. 3. The Event Display window displays the delta time and the data rate in the status lines at the bottom of the window. Frontline BPA 600 Hardware & Software User Manual...
Page 243: Switching Between Live Update And Review Mode
An event is anything that happens on the circuit or which affects data capture. Data bytes, control signal changes, and long and short breaks are all events, as are I/O Settings changes and Data Capture Paused and Resumed. Frontline BPA 600 Hardware & Software User Manual...
Page 244 If you want to see only the numerical values, click on the Numbers Only icon on the Event Display toolbar. The base of a number system. Binary is base 2, octal is base 8, decimal is base 10 and hexadecimal is base 16. Frontline BPA 600 Hardware & Software User Manual...
Page 245 Buffer Overflow - Indicates a buffer overflow error. A buffer overflow always causes a broken frame. Frontline BPA 600 Hardware & Software User Manual...
Page 246 Test Device Stopped Responding - The analyzer lost contact with the ComProbe for some reason, often because there is no power to the ComProbe. Test Device Began Responding - The analyzer regained contact with the ComProbe. Frontline BPA 600 Hardware & Software User Manual...
Page 247: Data/Audio Extraction
.mp3 files, and more. Then you can examine the specific files information individually. Frontline BPA 600 Hardware & Software User Manual...
Page 248 If this option is not selected, the audio packets are extracted without inserting the silence packets for the reserved empty slots. Note: This option is for SCO/eSCO only. Frontline BPA 600 Hardware & Software User Manual...
Page 249 10. If you did not select this option, you can open a file by simply double-clicking on the name. Also, if a file type is unknown, you can select the file and it appears in the Rename to: text box. Frontline BPA 600 Hardware & Software User Manual...
Page 250 Figure 4.153 - Rename To in the bottom section of Data Extraction Status Then you can rename the file, adding a file type to attempt to open the file. When you are finished, select Close to close the dialogs. Frontline BPA 600 Hardware & Software User Manual...
Page 251: Chapter 5 Navigating And Searching The Data
This mass of information by itself, however, is just that, a mass of information. There has to be ways to manage the information. ComProbe software provides a number of different methods for making the data more accessible. One of these methods is Find. Figure 5.1 - Find Dialog Frontline BPA 600 Hardware & Software User Manual...
Page 252: Searching Within Decodes
Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. Figure 5.2 - Find Decode Tab Search for String Frontline BPA 600 Hardware & Software User Manual...
Page 253 B coming from the DCE is a good example of how using a side restriction differs from searching without regard to data origin. While searching without regard for data Frontline BPA 600 Hardware & Software User Manual...
Page 254: Searching By Pattern
4. Click on the Pattern tab of the Find dialog. Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. Frontline BPA 600 Hardware & Software User Manual...
Page 255: Searching By Time
Side Restrictions 5.1.3 Searching by Time Searching with Time allows you search on timestamps on the data in Frame Display and Event Display window. To access the search by time function: Frontline BPA 600 Hardware & Software User Manual...
Page 256 1/10000000. Note: Month and Year are not available if you select Relative. 3. When you have specified the time interval you want to use, click on the Go To, Move Forward or Frontline BPA 600 Hardware & Software User Manual...
Page 257: Using Go To
To access the Go To function: 1. Open a capture file to search. 2. Open the Event Display or Frame Display window. 3. Click on the Find icon or choose Find from the Edit menu. Frontline BPA 600 Hardware & Software User Manual...
Page 258 Show All Events icon depressed on the Event Display window or Frame Display Event pane, choose All Events Number. If the Show All Events button is up, choose Data Event Number. Frontline BPA 600 Hardware & Software User Manual...
Page 259: Searching For Special Events
Not all special events are relevant to all types of data. For example, control signal changes are relevant only to serial data and not to Ethernet data. For a list of all special events and their meanings, see List of all Event Symbols on page 237. Frontline BPA 600 Hardware & Software User Manual...
Page 260: Searching By Signal
The section with the check boxes allows you to specify which control signals the analyzer should pay attention to when doing the search. The analyzer pays attention to any control signal with a check mark. Frontline BPA 600 Hardware & Software User Manual...
Page 261 Do a search for where one or more control signals changed from on to off. The analyzer would search the DTR signal and stop at the first event where DTR dropped from on to off. Frontline BPA 600 Hardware & Software User Manual...
Page 262: Searching For Data Errors
4. Click on the Errors tab of the Find dialog. Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. Frontline BPA 600 Hardware & Software User Manual...
Page 263 Chapter 5 Navigating and Searching the Data TELEDYNE LECROY Figure 5.10 - Find Error tab. Frontline BPA 600 Hardware & Software User Manual...
Page 264 If you are searching for an exact match, the analyzer asks you if you want to continue searching from the beginning of the buffer. Searching for Exact Error Conditions Frontline BPA 600 Hardware & Software User Manual...
Page 265: Find - Bookmarks
4. Click on the Bookmarks tab of the Find dialog. Note: The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing. Frontline BPA 600 Hardware & Software User Manual...
Page 266: Changing Where The Search Lands
Timestamping can be turned on and off while data is being captured. As a result, the capture buffer may have some data with a timestamp, and some data without. When doing a search by timestamp, the analyzer ignores Frontline BPA 600 Hardware & Software User Manual...
Page 267: Bookmarks
When you open a .cfa file, the bookmarks are available to you. Modify 1. Select the frame or event with the bookmark to be edited. 2. There are three ways to access the Add/Modfy Bookmark dialog. Frontline BPA 600 Hardware & Software User Manual...
Page 268: Displaying All And Moving Between Bookmarks
. Select the bookmark you want to move to and click the Go To button, or simply double-click on the bookmark. Click the Move Forward and Move Back buttons to cycle through the bookmarks. Frontline BPA 600 Hardware & Software User Manual...
Page 269 Figure 5.13 - Find Window Bookmark tab Used to Move Around With Bookmarks To delete a bookmark, select it and click the Delete button. To modify a bookmark, select it and click the Modify button. Click Remove All to delete all the bookmarks. Frontline BPA 600 Hardware & Software User Manual...
Page 270: Chapter 6 Saving And Importing Data
This dialog appears when you close a capture file after changing the Notes, the protocol stack, or bookmarks. The dialog lists information that was added or changed and allows you to select which information to save, and whether to save it to the current file or to a new one. Frontline BPA 600 Hardware & Software User Manual...
Page 271: Loading And Importing A Capture File
At present, the analyzer supports the following file types: ® Frontline Serialtest* Async and Serialtest ComProbe for DOS – requires the .byt for data and the .tim for timestamps (see note on importing timestamps). Frontline BPA 600 Hardware & Software User Manual...
Page 272: Printing
1. Select Print or Print Preview from the File menu on the Frame Display window to display the Frame Display Print dialog. Select Print if you just want to print your data to your default printer. Select Print Preview if you want access to printer options. Frontline BPA 600 Hardware & Software User Manual...
Page 273 When printing your data, the analyzer creates an html file and prints the path to the file at the bottom of the page. This file can be opened in your browser, however, it may appear different than the printed version. Frontline BPA 600 Hardware & Software User Manual...
Page 274: Printing From The Event Display
The Event Display Print feature uses the current format of the Event Display as specified by the user. About Event Display for an explanation on formatting the Event Display prior to initiating the print feature. Configure the Print File Range in the Event Display Print dialog Frontline BPA 600 Hardware & Software User Manual...
Page 275: Exporting
You can dump the contents of the Summary pane on the Frame Display into a Comma Separated File (.csv). To access this feature: 1. Right click on the Summary pane or open the Frame Display File menu. 2. Select the Export… menu item. Frontline BPA 600 Hardware & Software User Manual...
Page 276: Exporting A File With Event Display Export
Display Export dialog to Selection and allows the user to choose the All radio button. When only one event is selected (something must be selected), the All radio button in the Event Display Export dialog is selected by default. Frontline BPA 600 Hardware & Software User Manual...
Page 277 The timestamp data types displayed in columns for One Event Per Row. Timestamp Delta Event Number Byte Number Frame Number Type Side ASCII | 7-bit ASCII | EBCDIC | Baudot UART Overrun Frontline BPA 600 Hardware & Software User Manual...
Page 278 When exporting Baudot, you need to be able to determine the state of the shift character. In a text export, the state of the shift bit can be determined by the data in the Character field. When letters is active, the character field shows letters and vice versa. Frontline BPA 600 Hardware & Software User Manual...
Page 279: Chapter 7 General Information
Control window. To enable a setting, click in the box next to the setting to place a checkmark in the box. To disable a setting, click in the box to remove the checkmark. When viewing a capture file, settings related to data capture are grayed out. Frontline BPA 600 Hardware & Software User Manual...
Page 280 You can accept these values, or you can enter a unique file size. But if you try to close the dialog after entering a value greater than the maximum or less than the minimum, you will see the following dialog. Frontline BPA 600 Hardware & Software User Manual...
Page 281 Driver Action Queue Size In Operating System Pages - This is the size of the buffer used by the driver to store data to be transmitted. This value is expressed in operating system pages. Frontline BPA 600 Hardware & Software User Manual...
Page 282: Changing Default File Locations
The analyzer saves user files in specific locations by default. Capture files are placed in the My Capture Files directory and configurations are put in My Configurations. These locations are set at installation. Follow the steps below to change the default locations. Frontline BPA 600 Hardware & Software User Manual...
Page 283 If a user sets the My Decoders directory such that it is up-directory from an installation path, multiple instances of a personality entry may be detected, which causes a failure when trying to launch Frontline. For Frontline BPA 600 Hardware & Software User Manual...
Page 284: Side Names
The Side Names dialog will change depending on the sniffing technology in use at the time the software was loaded. Changes to the Names are used throughout the program. Figure 7.6 - Example: Side Names Where "Slave" and "Master" are current Frontline BPA 600 Hardware & Software User Manual...
Page 285: Timestamping
Choose Set Timestamp Format… from the Options menu on the Frame Display and Event Display window or click on the Timestamping Option icon in the Event Display toolbar. The Timestamping Options window will open. Figure 7.7 - Timestamping Options dialog Frontline BPA 600 Hardware & Software User Manual...
Page 286 Timestamping Options button, or click the click the Timestamping Options icon from the window. Event Display 2. Go to the Display Options section at the bottom of the window and find the Display Relative Timestamps checkbox. Frontline BPA 600 Hardware & Software User Manual...
Page 287: Technical Information
There are several things that you can do to try and solve this problem. Use capture filters to filter out data you don't need to see. Capture filters reduce the amount of data processed by the analyzer. (Ethernet Only) Frontline BPA 600 Hardware & Software User Manual...
Page 288: Btsnoop File Format
One or more variable-length Packet Record fields follow the File Header field. Each Packet Record field holds the data of one captured packet. File Header The structure of the File Header is as follows: Frontline BPA 600 Hardware & Software User Manual...
Page 289 Each packet record holds 24 octets of descriptive information about the packet, followed by the packet data, which is variable-length, and an optional pad field. The descriptive information is structured as six 32-bit (4- octet) integer values. The structure of the packet record is as follows: Original Length Frontline BPA 600 Hardware & Software User Manual...
Page 290: Ring Indicator
The following information applies when operating the analyzer in Spy mode or Source DTE, No FTS Cables mode. When using the cables supplied with the analyzer to capture or source data, Ring Indicator (RI) Frontline BPA 600 Hardware & Software User Manual...
Page 291: Progress Bars
Since the events are not renumbered, your colleague’s file use the same event numbers that your file does. 7.2.6 Useful Character Tables 7.2.6.1 ASCII Codes Frontline BPA 600 Hardware & Software User Manual...
Page 292 This is to differentiate the abbreviations for a control character from a hex number. For example, the abbreviation for Form Feed is listed as F/F, to differentiate it from the hex number FF. Frontline BPA 600 Hardware & Software User Manual...
Page 293: Decoderscript Overview
7.2.7 DecoderScript Overview The DecoderScript™ Reference Manual and User Guide is delivered with each Frontline ComProbe® Protocol Analysis System installation package under Developer Tools. The manual is also available on-line at FTE.com. Frontline BPA 600 Hardware & Software User Manual...
Page 294: Bluetooth Low Energy Att Decoder Handle Mapping
The devices are in development and the code to perform the mappings has not been written yet. The solution to this problem is to 1. define the mappings in a file and 2. then pre-loading the mapping using the ComProbe software. Frontline BPA 600 Hardware & Software User Manual...
Page 295: Contacting Frontline Technical Support
If you need to talk to a technical support representative about your Frontline BPA 600 product, support is available between 9 am and 5 pm, U.S. Eastern Time zone, and between 9 am and 5 pm, Pacific Time zone, on Monday through Friday.
Page 296 TELEDYNE LECROY Chapter 7 General Information Frontline BPA 600 Hardware & Software User Manual...
Page 297: Appendicies
Appendicies Appendix A: Application Notes Frontline BPA 600 Hardware & Software User Manual...
Page 298: Appendix A: Application Notes
A.2 Getting the Android Link Key for Classic Decryption A.3 Decrypting Encrypted Bluetooth®data with ComProbe BPA 600 A.4 Decrypting Encrypted Bluetooth® low energy A.5 Bluetooth® low energy Security A.6 Bluetooth Virtual Sniffing Frontline BPA 600 Hardware & Software User Manual...
Page 299: Audio Expert System: Aptx 'Hiccup' Detected
Expert System activated. The BPA 600 is connected to a personal computer (PC) that is running ComProbe Protocol Analysis System software. DUT1 was used as a source device. DUT1 was streaming an AES Reference file. Frontline BPA 600 Hardware & Software User Manual...
Page 300: Discussion
SNK (sink) devices currently not in use: SEPID (Stream Endpoint Identification) 5, 2, and 1. Figure 2 - Frame Display for AVDTP Signaling Frame 2089 & 2092 Frontline BPA 600 Hardware & Software User Manual...
Page 301 In Figure 4, frames 2138 through 2158 perform the GET_CAPABILITIES negotiation between the local and remote device for SEPIDs 2 and 1. SEPID 2 is an MPEG SEP, and SEPID 1 is the SBC SEP. Frontline BPA 600 Hardware & Software User Manual...
Page 302 We now move from he AVDTP protocol to the A2DP protocol to observe the audio. Problem Discovery Figure 6 - Frame Display for A2DP Streaming at Frame 2839 with Audio Expanded Frontline BPA 600 Hardware & Software User Manual...
Page 303: Conclusions
If there is interest in the Audio Expert System as an expansion of your ComProbe Bluetooth analyzer contact the Frontline sales at sales@fte.com or visit our web site at fte.com. Author: John Trinkle & Priyanka Gupta Publish Date:27 February 2015 Frontline BPA 600 Hardware & Software User Manual...
Page 304 TELEDYNE LECROY Appendicies Frontline BPA 600 Hardware & Software User Manual...
Page 305: Getting The Android Link Key For Classic Decryption
1. On the Android device go to Settings, 2. Select About. 3. In the About screen tap on Build number eight times. At some point you will see a notice similar to Frontline BPA 600 Hardware & Software User Manual...
Page 306: Retrieving The Hci Log
Figure 8 - Typical Android Developer options screen 6. On the Android device turn off Bluetooth. 7. Turn on Bluetooth. 8. Reboot the Android device. The HCI log file is now being generated and is saved to /sdcard/btsnoop_hci.log. Frontline BPA 600 Hardware & Software User Manual...
Page 307: Using The Comprobe Software To Get The Link Key
2. From the Control window menu select File, Open Capture File..3. When the Open window appears, set the file type to BTSnoop Files (*.log). If not already selected navigate to the My Capture Files directory and select btsnoop_hci.log. Frontline BPA 600 Hardware & Software User Manual...
Page 308 In the Frame Display Detail pane, expand HCI and HCI Event where the Link Key is shown. Copy and paste the Link Key into the appropriate BPA 600 datasource dialog. (See the example below) Frontline BPA 600 Hardware & Software User Manual...
Page 309 Appendicies TELEDYNE LECROY Figure 11 - Frame Display Showing Link Key Notification Event with the Link Key Author: John Trinkle with Joe Skupniewitz Publish Date: 30 September 2014 Frontline BPA 600 Hardware & Software User Manual...
Page 310 TELEDYNE LECROY Appendicies Frontline BPA 600 Hardware & Software User Manual...
Page 311: Decrypting Encrypted Bluetooth®Data With Comprobe Bpa
The sequence of events used to create this key, or pairing process, is shown in the ComProbe software Frame Display below. Frontline BPA 600 Hardware & Software User Manual...
Page 312 The Start Encryption Request with also be marked by the ComProbe software with an error that indicates that the link key calculated by the ComProbe software is different from the one used by your devices. Frontline BPA 600 Hardware & Software User Manual...
Page 313: Secure Simple Pairing (Ssp) (Bluetooth 2.1 And Later)
Control window and the BPA 600 Datasource where ComProbe device parameters are set for sniffing including the devices to be sniffed and how the link key is to be encrypted. Select the Devices Under Test tab. Make both your Bluetooth devices discoverable. Frontline BPA 600 Hardware & Software User Manual...
Page 314 An incorrect link key will show up in the Frame Display. Open the Frame Display LMP tab and search for frames with errors appearing in red. In the Decode pane a link key error will appear in red under Errors. Frontline BPA 600 Hardware & Software User Manual...
Page 315: How To Tell If A Device Is In Secure Simple Pairing Debug Mode
Decode pane in the screenshots below where the master is in SSP debug mode. Remember, only one of the Bluetooth devices needs to be in SSP debug mode. Figure 13 - Encapsulated Payload Message from a Bluetooth Device in SSP Debug Mode Frontline BPA 600 Hardware & Software User Manual...
Page 316 TELEDYNE LECROY Appendicies Figure 14 - Encapsulated Payload Message from a Bluetooth Device NOT in SSP Debug Mode Frontline BPA 600 Hardware & Software User Manual...
Page 317 Appendicies TELEDYNE LECROY Author: Sean Clinchy Publish Date: February 2014 Frontline BPA 600 Hardware & Software User Manual...
Page 318 TELEDYNE LECROY Appendicies Frontline BPA 600 Hardware & Software User Manual...
Page 319: Decrypting Encrypted Bluetooth® Low Energy
Keyboard with Keyboard having the ability to input a number. The output can be either None or Display with Display having the ability to display a 6-digit number. For each device in a paring link the IO capability determines their ability to create encryption shared secret keys. Frontline BPA 600 Hardware & Software User Manual...
Page 320: Pairing Methods
Figure 16 - Initiator Pairing Confirm Example (ComProbe Frame Display, BPA 600 low energy capture) A third method, Out Of Band (OOB), performs the same as Pass Key, but through another external link such as NFC. Frontline BPA 600 Hardware & Software User Manual...
Page 321: Encrypting The Link
LTKs. Therefore the slave will distribute LTK, EDIV, and Rand to the master device for storage. When a slave begins a new encrypted session with a previously linked master device, it will request distribution of EDIV and Rand and will regenerate LTK. Frontline BPA 600 Hardware & Software User Manual...
Page 322: Encrypting The Data Transmission
However any of the ComProbe devices (BPA 500, BPA low energy) that are low energy capable will accomplish the same objectives, although the datasource setup will be slightly different for each device. Frontline BPA 600 Hardware & Software User Manual...
Page 323 5. To start capture click on the Start Sniffing button on the BPA 600 datasource toolbar. Frontline BPA 600 Hardware & Software User Manual...
Page 324 LTK to the master to allow exchange of encrypted data. Frame# 39,661 through 39,714 in the Summary pane SMP tab are the key distribution frames. Figure 24 - SMP Pairing Confirm (Frame# 39,591) from Initiator (Side 1) Frontline BPA 600 Hardware & Software User Manual...
Page 325 Figure 27 - MSC SMP Paring (BPA 600 low energy capture) Pairing Response, is sent from the slave in Frame# 35,545. SMP_Pairing Confirm occurs between the master and the slave devices at Frame# 39,591 and 39,600 respectively. Frontline BPA 600 Hardware & Software User Manual...
Page 326 The actual decrypted data appears between the Payload Length and the MIC in the packet. This is shown in the Binary pane below the Summary pane. Frontline BPA 600 Hardware & Software User Manual...
Page 327 Appendicies TELEDYNE LECROY Figure 29 - Decrypted Data Example (Frame# 39,723) Author: John Trinkle Publish Date: 9 April 2014 Revised: 23 May 2014 Frontline BPA 600 Hardware & Software User Manual...
Page 328 TELEDYNE LECROY Appendicies Frontline BPA 600 Hardware & Software User Manual...
Page 329: Bluetooth® Low Energy Security
Although Telegraph cryptography has been around for millenniums—dating back to 2000 B.C. — Chappe, was the first to use it in a wide area network in the modern sense. Frontline BPA 600 Hardware & Software User Manual...
Page 330: How Encryption Works In Bluetooth Low Energy
Bluetooth low energy uses the same pairing process as Classic Bluetooth: Secure Simple Pairing (SSP). During SSP initially each device determines its capability for input and output (IO). The input can be None, Yes/No, or Frontline BPA 600 Hardware & Software User Manual...
Page 331: Pairing Methods
Figure 33 - Initiator Pairing Confirm Example (ComProbe Frame Display, BPA 600 low energy capture) A third method, Out Of Band (OOB), performs the same as Pass Key, but through another external link such as NFC. Frontline BPA 600 Hardware & Software User Manual...
Page 332: Encrypting The Link
LTKs. Therefore the slave will distribute LTK, EDIV, and Rand to the master device for storage. When a slave begins a new encrypted session with a previously linked master device, it will request distribution of EDIV and Rand and will regenerate LTK. Frontline BPA 600 Hardware & Software User Manual...
Page 333: Encrypting The Data Transmission
The counter is initialized to zero when the CSRK is generated and is incremented with each message signed with a given CSRK. The combination of the CSRK and counter mitigates replay attacks. Frontline BPA 600 Hardware & Software User Manual...
Page 334: Table Of Acronyms
128-bit confirmation value from the responder Session key Security Manager Protocol Srand 128-bit random number used to generate Sconfirm Secure Simple Pairing Short Term Key Temporary Key Author: John Trinkle Publish Date:21 May 2014 Frontline BPA 600 Hardware & Software User Manual...
Page 335: Bluetooth Virtual Sniffing
With HCI-sniffing, the software engineer can see exactly what is going on. HCI-sniffing often results in faster and easier debugging than air sniffing. Frontline BPA 600 Hardware & Software User Manual...
Page 336: Bluetooth Sniffing History
Not only is there a physical tap in traditional sniffing, but the sniffer must have some knowledge of the physical characteristics of the link being sniffed. For example, a Bluetooth air sniffer must know the BD_ADDR Frontline BPA 600 Hardware & Software User Manual...
Page 337: The Convenience And Reliability Of Virtual Sniffing
The homegrown hex dumps and trace tools from the early days of Bluetooth just are not good enough anymore. And building a good protocol analyzer is not easy. So stack vendors are partnering with Frontline. This permits the stack vendors to concentrate of improving their stack. Frontline BPA 600 Hardware & Software User Manual...
Page 338: A.6.8 Case Studies: Virtual Sniffing And Bluetooth Mobile Phone Makers
If you are end customer and you want to take advantage of Virtual sniffing, all you need to do is buy any Frontline Bluetooth product. Virtually sniffing comes standard with product. Frontline BPA 600 Hardware & Software User Manual...
Page 339 Appendicies TELEDYNE LECROY Author: Eric Kaplan Publish Date: May 2003 Revised: December 2013 Frontline BPA 600 Hardware & Software User Manual...
Page 341 Appendicies Frontline BPA 600 Hardware & Software User Manual Index operating mode referenced 193, 198 test file 194 A2DP Decoder Parameters 44 Wave Panel 211 Aborted Frame 274 viewer 214 About Display Filters 96 Auto-Sizing Column Widths 90 About L2CAP Decoder Parameters 48...
Page 342 Frontline BPA 600 Hardware & Software User Appendicies Manual BT Snoop File Format 280 CN 285 BT Timeline Legend 126 Coexistence View 143 Btsnoop 280 Audio Expert System 223 Buffer 271 le Devices Radio Buttons 161 Buffer Overflow 271 Legend 162...
Page 343 Appendicies Frontline BPA 600 Hardware & Software User Manual Confirm CFA Changes 262 Decodes 40, 71, 75, 81, 92, 244 Context For Decoding 74 decrypt 90 Control Characters 284 decryption status 90 Control Signals 238, 276 Default File Locations 274...
Page 344 Frontline BPA 600 Hardware & Software User Appendicies Manual Event Display 84, 232, 268 Find Introduction 243 Event Display Export 268 Font Size 239 Event Display Toolbar 232 Frame Display 75, 78, 81-82, 84-85, 90-95 Event Numbering 283 Audio Expert System 223...
Page 345 Appendicies Frontline BPA 600 Hardware & Software User Manual Include/Exclude 98 Missing Bluetooth Clock 126 Information Screen 37 Missing Decode Information 46, 51 Mixed Channel/Sides 237 L2CAP 48 Mixed Sides Mode 237 L2CAP Override Decode Information 50 Modem Lead Names 276...
Page 346 Frontline BPA 600 Hardware & Software User Appendicies Manual PER Stats Scroll Bar 188 Filters 100-101 Packet Timeline 116, 125 Framing Markers 73 Packet Timeline Menu Bar 117 Reset Panes 85 Packet_Depiction 112 Resolution 278 Packet_Navigation_and_Selection 115 Resumed 238 Packet_Timeline_Introduction 111...
Page 347 Appendicies Frontline BPA 600 Hardware & Software User Manual Short Break 238 Side Names 276 unable to decrypt 90 Sides 276 Underrun Error 239 Signal Strength 111 Unframe 73 Sorting Frames 82 Unframe Function 73 Special Events 251 Unframing 73...
Page 348 Frontline BPA 600 Hardware & Software User Appendicies Manual - 340 -...

Teledyne Lecroy Frontline BPA 600 Hardware And Software User Manual

Chapter 1 Frontline Hardware & Software

Chapter 2 Getting Started

Chapter 3 Configuration Settings

Chapter 4 Capturing and Analyzing Data

Chapter 5 Navigating and Searching the Data

Chapter 6 Saving and Importing Data

Chapter 7 General Information

Appendix A: Application Notes

Quick Links

Need help?

Questions and answers

Related Manuals for Teledyne Lecroy Frontline BPA 600

Summary of Contents for Teledyne Lecroy Frontline BPA 600

Table of Contents