Ask Your Question
0

Can I use tshark with Nordic BLE Sniffer plugin to capture from command line?

asked 2018-02-27 07:59:29 +0000

nik gravatar image

updated 2018-02-27 08:04:54 +0000

I have a functional Wireshark 2.4.4 windows 10 installation that can capture BLE communications of a selected device.

Is it possible to use the same plugin (with some command line arguments to select the BLE device) and capture from the command line (tshark)?

A basic command would look like this,

tshark -i <interface> -f "(not btle.length == 0)"

Now, I expected that to work for advertisement packets -- but it returns soon with zero packets captured.

If that can be made to work I am trying to figure out how I can specify a BLE device to capture its communications once paired.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-02-27 18:21:18 +0000

Guy Harris gravatar image
tshark -i <interface> -f "(not btle.length == 0)"

Now, I expected that to work for advertisement packets -- but it returns soon with zero packets captured.

not btle.length == 0 is not a valid capture filter, and the -f argument to TShark specifies a capture filter, not a Wireshark filter (display/color/etc. filter). Try doing

 tshark -i <interface> -R "(not btle.length == 0)"

instead.

By the way, you do not need a plugin to dissect the packets and, in fact, at least on Windows, Wireshark explicitly ignores the Nordic BTLE plugin, to avoid collisions with the built-in dissection code.

edit flag offensive delete link more

Comments

Good point on -f I was distracted there. The dissect-without-plugin part was not known to me. I'll recheck and get back. Thanks. (Can't even upvote yet on Wireshark stack -- just out of the egg here).

nik gravatar imagenik ( 2018-02-28 05:23:31 +0000 )edit

You can "accept" the answer though, by clicking on the checkmark icon next to it.

grahamb gravatar imagegrahamb ( 2018-02-28 10:25:44 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-02-27 07:59:29 +0000

Seen: 623 times

Last updated: Feb 27 '18