makerdiary / nrf52840-mdk-usb-dongle

An open-source, small and low-cost USB Dongle that supports Bluetooth 5.4, Bluetooth mesh, Thread, Zigbee, 802.15.4, ANT and 2.4 GHz proprietary protocols
https://wiki.makerdiary.com/nrf52840-mdk-usb-dongle/
Apache License 2.0
301 stars 79 forks source link

ble 5.0 sniffer #37

Closed Pillar1989 closed 3 years ago

Pillar1989 commented 3 years ago

@caizelin @xiongyihui A BLE 5.0 sniffer is badly needed.

xiongyihui commented 3 years ago

Try this one https://github.com/makerdiary/raccoon

Pillar1989 commented 3 years ago

@xiongyihui support extend packets ?

gbuzogany commented 3 years ago

I got the Nordic BLE sniffer working on the nrf52840-MDK, it works well with wireshark and seems to be very complete. Download here: https://www.nordicsemi.com/Software-and-tools/Development-Tools/nRF-Sniffer-for-Bluetooth-LE/Download#infotabs

Then follow the instructions here to get it working: https://infocenter.nordicsemi.com/pdf/nRF_Sniffer_UG_v2.2.pdf

caizelin commented 3 years ago

@gbuzogany Awesome!

telethonic commented 3 years ago

I got the Nordic BLE sniffer working on the nrf52840-MDK, it works well with wireshark and seems to be very complete. Download here: https://www.nordicsemi.com/Software-and-tools/Development-Tools/nRF-Sniffer-for-Bluetooth-LE/Download#infotabs

Then follow the instructions here to get it working: https://infocenter.nordicsemi.com/pdf/nRF_Sniffer_UG_v2.2.pdf

@gbuzogany so was this on the MDK, not the USB dongle?

Which firmware image did you use?

Thanks :)

gbuzogany commented 3 years ago

It was on the MDK USB dongle (https://makerdiary.com/collections/frontpage/products/nrf52840-mdk-usb-dongle).

I used the sniffer_nrf52840dongle_nrf52840_7cc811f.hex

telethonic commented 3 years ago

Thanks for the quick reply :-)

I'm getting closer, but not quite there yet.

I wrote that firmware using nRF Connect, put the extcap/* files in place, and the snifffer shows up in wireshark.

When I start a capture though, wireshark just hangs :-|

Is there a way to check if the dongle was flashed correctly? Did you maybe use a different tool to flash it? (@gbuzogany )

and edit: which OS do you use?

gbuzogany commented 3 years ago

I used a segger j-link to flash the board (SWD interface). I use macOS.

Make sure to follow the installation guide: https://infocenter.nordicsemi.com/pdf/nRF_Sniffer_UG_v2.2.pdf

telethonic commented 3 years ago

Thanks again :+1:

Just now I ran wireshark as root, and now it seems to work (!)

So probably a permissions issue somewhere.

Edit: but now the sniffer shows up 3 times (...), and when starting capture, I sometimes get 1 packet, sometimes zero :-(

(running on Ubuntu Linux here)