THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

When I work with BLE sniffer can I use filters by advertising data?

When I work with BLE sniffer can I use filters by advertising data?

rakhlingm's avatar
1
rakhlingm
asked 2018-10-18 10:23:23 +0000
edit flag offensive 0 remove flag close merge delete

Comments

This depends on which advertising data you want to filter on. Wireshark supports generic types but not many manufacturer specific types. Can you tell more which types you have?

Stig's avatar Stig (2018-10-18 11:42:03 +0000) edit

Thanks! For example in my MPA in use ALT-BEACON. Advertising data:

 Beacon beacon = new Beacon.Builder()
                .setId1("12345678-0000-0000-0000-00004d504132")   // 31 - MPA1 (Samsung); 32 - MPA2 (LG)
                .setId2("1")
                .setId3("2")
                .setManufacturer(0x0118)
                .setTxPower(-59)
                .setDataFields(Arrays.asList(new Long[]{0l}))
                .build();
        BeaconParser beaconParser = new BeaconParser()
                .setBeaconLayout("m:2-3=beac,i:4-19,i:20-21,i:22-23,p:24-24,d:25-25");
        beaconTransmitter = new BeaconTransmitter(getApplicationContext(), beaconParser);

Can I use filter by part of Advertising data: ... xxx.contains("12345678")?

rakhlingm's avatar rakhlingm (2018-10-21 11:06:29 +0000) edit
add a comment see more comments

1 Answer

0

Hi

You can try something like this:

btcommon.eir_ad.entry.data[0:2] == 00:83

this will match first two octets - [start octet:length] of the AD Structure data

You can also try :

frame[14:2] == 00:83
Piotr Winiarczyk's avatar
1
Piotr Winiarczyk
answered 2018-11-26 20:22:29 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer