Home

ComProbe USB User Manual - Frontline Test Equipment

1. Select the This exactly describes the search for event where aaa state radio button y One or more of these changed ma i nc Nex One or more of these occurred gq N18 Ex9cy Pas Find Previous One or more of these was off zarile HIS atalia Find Previous e This changes the normal check boxes to a Hep i elp series of radio buttons labeled On Off On Off Don t Care AA and Don t Care for each error Reserved OC Side Restriction Search without regard to data origin o On means that the error occurred Search only these sides o Off means that the error did not E Slave occur Master o Don t Care means that the analyzer ignores that error condition e Select the appropriate state for each type of error Example If you need to find an event where just an overrun error occurred but not any other type of error you would choose overrun error to be On and set all other errors to Off This causes the analyzer to look for an event where only an overrun error occurred If you want to look for events where overrun errors occurred and other errors may have also occurred but it really doesn t matter if they did or not choose overrun to be On and set the others to Don t Care The analyzer ignores any other type of error and find events where overrun errors occurred To find the next error click the Find Next button To find an error that occurred earlier
2. 2 69 Figure 4 21 Set Condition Dialog in Advanced View 2 22 e eee eee e eeeeeeeeeeeee 70 Figure 4 22 Rename Filters Dialog _ 22 2 a 71 Figure 4 23 Connection Filter from the Frame Display Menu __ 2 eee eee eee eee cece cess 72 Figure 4 24 Connection Filter from the Frame Display Toolbar right click 2 2 00 72 Figure 4 25 Connection Filter from the Frame Display Pane right click 73 viii ComProbe USB User Manual Figure 4 26 Connection Filter from frame selection right click _ 22 2 022222 e eee eee eee eee 74 Figure 4 27 Front Display Filtered on Access Address Ox8e89bed6 _ 2 eee eee eee ee eee ee eee 75 Figure 4 28 Unfiltered Capture File with Classic low energy and 802 11 76 Figure 4 29 Connection Filter selecting All 802 11 frames front e eee eee 76 Figure 4 30 Frame Display Quick Filtering and Hiding Protocols Dialog 2 77 Figure 4 31 Message Sequence Chart Window a 78 Figure 4 32 Classic and LE tabs cece cee cece cece eee e cece eee eeeeeeceeeeeeees 79 Figure 4 33 Frame and Time Display inside red box 22 eee eee cece ee eee eee e cece ee ceeceeeees 80 Figure 4 34 MSC Synchronization with Frame Display 22 e ee eee eee eee eee eeeeeeeeeeee 80 Figure 4 35 Contro
3. eee cece eee eee c cece eee ececeeceeceeeees 6 Figure 2 6 Wrong Connection With More Than One Device Under Test 2 2 22 2 7 Figure 2 7 Correct Connection With More Than One Device Under Test e eee eee ee eee 7 vil ComProbe USB User Manual Figure 2 8 Desktop Folder Link 2 22 22 ile aaoo aaa aaao LaaLa DLLD L22222 aaoo oaan 8 Figure 2 9 ComProbe Analyzer Control Window 2 22 cece cece cece ccc cecceccceccececeeceeeees 11 Figure 3 1 Select Set Initial Decoder Parameters from Control window 2 2 23 Figure 3 2 Tabs for each decoder requiring parameters 20 2 eee eee cee cee cece cece eceeeeeeee 23 Figure 3 3 Set Subsequent Decoder Parameters from Control window 2 2 2 24 Figure 3 4 Example Set Subsequent Decode for Frame 52 RFCOMM 2 eee ee eee cence 24 Figure 4 1 Format Menu cc ee ee eee ee eee e eee eee ee 38 Figure 4 2 Header labels right click waka mak BALUD NGA DULOT DALA bA DALAN EK AG NLA Sebewhewecaneeeweeues 38 Figure 4 3 Data display right click menu eee cee cece cece ee cee cece eee eeeeeeeees 39 Figure 4 4 Event Display Options menu _ a 42 Figure 4 5 Event Display Font Size Selection eee cece cece eee e cece eee e eee eeceeeees 42 Figure 4 6 Frame Display w
4. Figure 4 16 Example Set Conditions Self Configuring Based on Protocol Selection 63 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual Set Condition 5 s Currently Active Condition Untitled Include Exclude Condition Select each frame in the range 187 to 234 Enter decimal numbers by typing in the number directly and hexadecimal numbers by starting the number with Ox Advanced Cancel Help Figure 4 17 Example Set Conditions Self Configuring Based on Frame Range 2 Select Include or Exclude to add filtered data or keep out filtered data respectively 3 Select the initial condition for the filter from the drop down list 4 Setthe parameters for the selected condition in the fields provided The fields that appear in the dialog box are dependent upon the previous selection Continue to enter the requested parameters in the fields provided until the condition statement is complete 5 Click OK The system displays the Save Named Condition dialog Provide a name for the filter condition or accept the default name provided by the system and click OK Prohibited characters are left bracket right bracket and equal sign The Set Condition dialog box closes creates a tab on the Frame Display with the filter name and applies the filter The filter also appears in the Quick Filtering and Hiding Protocols dialog When a display filter is app
5. 222 occ cece ec eee eee ce eee e cence eeeeeceeeeeees 117 Figure 6 2 Frame Display Print Preview Dialog _ 222 22 eee cece eee ee ec eee eee cece eeeeeeees 118 Figure 6 3 Event Display Print Dialog _ 2 22 oe cece eee cee eee cece cee ceeceeeceeceees 119 Figure 6 4 Event Display Export Example csv file 120 Figure 6 5 Example csv Event Display Export Excel spreadsheet 2 2 20 e eee ee eee eee eee 122 Figure 7 1 System Settings Single File Mode _ _ 2 22 22 eee eee cece cee cece cece eeeeeeeeeee 124 Figure 7 2 Advanced System Options dialog 2 22 a 126 Figure 7 3 Start Up Options dialog AA 127 Figure 7 4 File Locations dialog _ 2 220 22 a 128 Figure 7 5 File Locations Browse dialog _ _ 22 22 eee eee eee eee cece cece ee cee cece noaoo annann 128 Figure 7 6 Example Side Names Where Slave and Master are current eee 130 Chapter 1 ComProbe Hardware amp Software Frontline Test Equipment ComProbe family of protocol analyzers work with the following technologies e Classic Bluetooth e Bluetooth low energy e Dual Mode Bluetooth simultaneous Classic and low energy e Bluetooth Coexistence with 802 11 e Bluetooth HCI USB SD High Speed UART e NFC e 802 11 Wi Fi e SD e USB e HSU High Speed UART The ComProbe hardware interfaces with your computer that is running our robust s
6. e Bluetooth low energy o All will filter in all Bluetooth low energy frames You are in effect filtering out any Classic Bluetooth frames and are selecting to filter in all Bluetooth low energy access addresses o Access Addresses displays all the low energy slave device s access address You can select only one access address to filter The selected link will filter in only the frames associated with that access address e 802 11 o All will filter in all 802 11 frames You are in effect filtering out any other technology frames e HCI o All will filter in all HCI frames You are in effect filtering out any other technology frames Frame Display TestFileSlimmmer cta File Edit View Format Live PB a ira D O nee Filtering An F Li as FI hil os Frame 6 471 Master Len 289 Apply Modify Display Filters 2 O Fmt ka we A a Errors ave Baseband Packet Status CR So a Baseband Hide Show Display Filters i Header Length 11 Bookmarks Options Window Help Sum Rename Display Filters Header Version 3 beseAdd CAC ADADDA Fram Delta Timestamp Link 4 Connection Filter k Classic i All a i Role Master 0400 00 9b 01 7e appre a T maa Mia ink o 10 55 32 665 iy Channel 68 2470 MHz buli maa 10 55 99 671 io Clock Ox0001 d0c0 ce 3 daa Packet Status CRC Error 20 SU 00 00 1 4 i uga a FLOW
7. 3 When you have specified the time interval you want to use click on the Go To Move Forward or Move Backward buttons to start the search from the current event Note When you select Absolute as Search for Go To is available When you select H Relative as Search for Move Forward or Move Backwardis available Go to the timestamp On or before On or after The analyzer searches for an event that matches the time specified If no event is found at the time specified the analyzer goes to the nearest event either before or after the specified time Choose whether to have the analyzer go to the nearest event before the specified time or after the specified time by clicking the appropriate radio button in the Go to the timestamp box If you are searching forward in the buffer you usually want to choose the On or After option If you choose the On or Before option it may be that the analyzer finishes the search and not move from the current byte if that byte happens to be the closest match When you select Absolute as Search for the radio buttons are On or before the specified time or On or after the specified time When you select Relative as Search for the radio buttons are On or before the specified time relative to the first selected item or On or after the specified time relative to the last selected item 1 Select On or before the specified time or On or after the specified time 2 When you have specified the time interval you wan
8. There are two ways to hide a layer 48 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data 1 Right click on the layer in the Decode pane and choose Hide protocol name Layer In All Frames 2 Click the Set Protocol Filtering button on the Summary pane toolbar In the Protocols to Hide box on the right check the protocol layer s you want hidden Click OK when finished To reveal a hidden protocol layer 1 Right click anywhere in the Decode pane 2 Choose Show protocol name Layer from the right click menu or click the Set Protocol Filtering button and un check the layer or layers you want revealed 4 4 1 4 Physical vs Logical Byte Display The Event Display window and Event Pane in the Frame Display window show the physical bytes In other words they show the actual data as it appeared on the circuit The Radix Binary and Character panes in the Frame Display window show the logical data or the resulting byte values after escape codes or other character altering codes have been applied a process called transformation As an example bytes with a value of less than 0x20 the Ox indicates a hexadecimal value cannot be transmitted in Async PPP To get around this a Ox7d is transmitted before the byte The Ox7d says to take the next byte and subtract 0x20 to obtain the true value In this situation the Event pane displays 0x7d 0x23 while the Radix pane displays 0x03 4 4 1 5 Sorting Frames By default
9. from the drop down control 4 5 Analyzing Control Signal Changes Real Time 4 5 1 Breakout Box Window The Breakout Box window provides a real time graphical view of control signals The window is customizable based on the control signals you wish to view and your preference of indicators 1 0 T F arrows and simulated LEDs Also included are counters showing the number of times a control signal has changed To open this window click the Breakout Box icon e on the Control window Whenever an enabled input changes state it will issue an event and be tagged with a timestamp of when the input was interpreted by the analyzer Digital inputs can not exceed a rate of 30 MHz Digital inputs that occur faster than that are not guaranteed to be interpreted correctly by the analyzer Also only one digital input event may occur per active packet All other digital input events can only be handled after the packet has completed Digital inputs although guaranteed to have the correct timestamp given the previous conditions have the possibility of being presented out of order because they are provided randomly by the user and have no direct correlation to 86 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data the bus It is important to note that the digital inputs are susceptible to cross talk if they are not being actively driven A situation like this could occur if a digital input has been enabled but has not been ti
10. kari TLE Radi Pana E a 76 if b Fo ia 1 t353 a Character Pane ERT EGS ERAT 5 4 L ta 5 3E Ob Jd da 5 73 i Event Pane 1 GA a Tete eee FHP aaa ZA TA Lt Lin Fee Help Pers Fl Figure 4 6 Frame Display with all panes active Frame Display Panes The Frame Display window is used to view all frame related information It is composed of a number of different sections or panes where each pane shows a different type of information about a frame e Summary Pane The Summary Pane displays a one line summary of each frame for every protocol found in the data and can be sorted by field for every protocol Click here for an explanation of the symbols next to the frame numbers e Decode Pane The Decode Pane displays a detailed decode of the highlighted frame Fields selected in the Decode Pane have the appropriate bit s or byte s selected in the Radix Binary Character and Event panes e Radix Pane The Radix Pane displays the logical data bytes in the selected frame in either hexadecimal decimal or octal e Binary Pane The Binary Pane displays a binary representation of the logical data bytes e Character Pane The Character Pane displays the character representation of the logical data bytes in either ASCII EBCDIC or Baudot e Event Pane The Event Pane displays the physical data bytes in the frame as received on the network By default all panes except the Event Pane are displayed when the Frame Display
11. 267 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual Deleting Saved Display Filters 1 Select Delete Display Filters from the Filter menu in the Frame Display 6 window to Delete Named Conditions open the Delete Named Condition dialog SA ox The system displays the Delete Named ted Cancel Condition dialog with a list of all user defined i Delete filters Hep 2 Select the filter to be deleted from the list 3 Click the Delete button 4 Click OK The Delete Named Condition dialog box closes and the system deletes the filter Hiding and Revealing Display Filters If a display filter is showing the following steps will hide that filter but will not delete it 1 Select Hide Show Display Filters from the Filter menu onthe Hide Show Filters Frame Display window to open Filters the Hide Show Filters dialog The system displays the Hide Show aa Filters dialo g with a list of all user kong each frame where the protocol Data field ASCII Contains the Substring defined filters 2 Select the filter to be hidden from the cancel Hep combo box 3 Click the Hide button The Hide button is only showing if the selected filter is currently showing in the Frame Display 4 Click OK The Hide Show Filters dialog box closes and the system hides the filter and removes the filter tab from the Frame Display If a display filter is hidden the following steps will
12. 4 Click the OK button on the Set Initial Decoder Parameters window to apply the deletion and close the dialog 3 2 2 USB Decoder Parameters 3 2 2 1 About USB Decoder Parameters There may be times when the context for decoding a frame is missing For example if the analyzer captured a response frame but did not capture the command frame then the decode for the response may be incomplete The Set Initial Decoder Parameters dialog provides a means to supply the context for any frame The system allows the user to define any number of parameters and save them in templates for later use Select Set Initial Decoder Parameters from the Options menu on the Control A window or the Frame Display E window to display the Set Initial Decoder Parameters dialog The USB Template function provides the capacity to create multiple templates that contain different parameters This capability allows the user to maintain individual templates for each USB network monitored Applying a template containing only those parameters necessary to decode transmissions particular to an individual network enhances the efficiency of the analyzer to decode data Each entry in the Set Initial Decoder Parameters dialog takes effect from the beginning of the capture onward or until redefined in the Set Subsequent Decoder Parameters dialog The USB Set Initial Decoder Parameters dialog requires the following user inputs to complete a parameter e Function Address Range 1 12
13. AVDTP Signaling Baseband Bluetooth FHS Headset L2CAP LMP Non Captured Info PreConnection FHS RFCOMM SDP All Frames With Information All But the Last Layer All Frames With Information AYDTP AVDTP Signaling Baseband Bluetooth FHS Headset L2CAP LMP Non Captured Info PreConnection FHS RFCOMM SDP Filter0 Filter Filter2 SCO link Supported Filter3 Role Slave Configured BT low energy devic Exclude NULLs and POLLs Cancel Hep Cancel Cancel Help Filtering shows only frames that contain the protocol desired but it shows the entire frame Hiding removes any protocol layers from displaying in any frame Figure 4 30 Frame Display Quick Filtering and Hiding Protocols Dialog The box on the left is Protocols To Filter In When you select the checkbox for a protocol in the Protocols to Filter In the Summary pane will only display those frames that contain data from that protocol If you filter on more than one protocol the result are all frames that contain at least one of those protocols For example if you filter on IP and IPX NetBIOS you receive all frames that contain either IP or IPX NetBIOS or both A Quick Filter tab then appears on the Frame Display Changing the filter definition on the Quick Filter dialog changes the filter applied on the Quick Filter tab Quick filters are persistent during the session but are discarded when the session is clos
14. ComProbe USB User Manual Chapter 6 Saving and Importing Data Changes made to the file appear in a list in the left pane You can click on each item to see details in the right pane about what was changed for each item You simply check the boxes next to the changes you want to keep Once you decide what changes to keep select one of the following e Save To This File Saves the changes you have made to the current capture file e Save As Saves the changes to a new file e Cancel the Close Operation Closes the file and returns you back to the display No changes are saved e Discard Changes Closes the file without saving any of the changes made to the notes bookmarks or protocol stack 6 3 Loading and Importing a Capture File 6 3 1 Loading a Capture File From the Control Window 1 Goto the File menu 2 Choose a file from the recently used file list 3 If the file is not in the File menu list select Open Capture File from the File menu or simply click on the i Open icon a on the toolbar 4 Capture files have a cfa extension Browse if necessary to find your capture file 5 Click on your file and then click Open 6 3 2 Importing Capture Files 1 From the Control window Gy go to the File menu and select Open Capture File or click on the Open icon on the toolbar 2 Left of the File name text box select from the drop down list Supported File Types box to All Importable File Types or All Supported File Types c
15. PAPER CONNECHON TIPS 2 ee a ee eee hea es eee eee ee eee omens t 7 22 Data Capture M Nods asa ANAN aahh an haaa Dado Nad pA NGA LE NAAN O BALARA D EN LANE NANA kA RAD baka LAn 8 2 2 1 Opening ComProbe Data Capture Method ieee eee eee cece cece eeeeeeees 8 2 2 2 ComProbe USB Data Capture Methods e eee eee cece eee e cece cece ceeeeee 10 Paa AA AA 10 2 3 1 Control Window Toolbar 22222 c eee eee ee ee ee eee eee eee eee 11 2 3 2 Configuration Information on the Control Window 22 eee eee eee eee eee cece eeee 12 2 3 3 Status Information on the Control Window 22 22 2 eee eee eee eee eee eee ee ee ee eee 12 2 3 4 Frame Information on the Control Window 2 20 2 o eee eee eee cece ee ce ce ee cece ee eee eee 13 2 3 5 Control Window Menus 2 2 222 eee eee ee eee ee ee ee eee ee ee ee ee cece eee eee ees 13 2 3 6 Minimizing Windows _ _ 22 22 2 eee eee cece ce cece ee ec eee cee eee LLL eee e Laaa anaana 2 16 Chapter 3 Configuration Settings __ _ 2 222 oie eee a 17 3 1 USB I O Configuration cc ce eee eee eee cece cece oonan 17 3 1 1 ComProbe USB Hardware Settings _ 22 22 eee eee cee cee cee eee eee cece ce eeeeeeeeeeee 17 3 1 2 USB I O Settings 17 3 1 3 USB I O Settings Digital Output Configuration 2222 e eee eee ee eeeeeees 19 3 2 Decoder Parameters a ost ee AA 22 3 2 1 Decoder Paramete
16. Unframe 31 Unframe Function 31 Unframing 31 Unknown Event 41 USB 26 27 USB HCI Sniffing 28 USB I O Settings Digital Output Configuration 19 USB Missing Decode Information 26 USB Override Decode Information 27 V vendor specific decoder 140 Viewing Data Events 37 W Wrap Buffer File 123 152
17. When the analyzer starts up it immediately begins data capture to that file If the file already exists the data in it is overwritten 7 1 2 Changing Default File Locations The analyzer saves user files in specific locations by default Capture files are placed in the My Capture Files directory and configurations are put in My Configurations These locations are set at installation Follow the steps below to change the default locations 1 Choose Directories from the Options menu on the Control window to open the File Locations window 127 ComProbe USB User Manual Chapter 7 General Information File Locations File Types Location My Capture Files C Users Public DocumentsFrontine Test Equipment hMy Capture Files My Configurations C Users Public DocumentsFronthne Test EquipmentsMy Configurations My Decoders CA sers4Public 3D ocuments4Prontine Test Equipment Decoders My Log Files C AU sers4Publie Documents Frontline Test EquipmentyhMy Log Files My Methods C Users Public DocumentssFrontline Test EquipmentsMy Methods 4 IF Modify CO Use Last Opened Folder for Capture Files Figure 7 4 File Locations dialog 2 Select the default location you wish to change 3 Click Modify 4 Browse to a new location Specify My Decoders directory a di Public b gt di Desktop F d Public Documents r di Frontline Test Equipment di My Capture Files di My Configurations My Decoders
18. the analyzer to compile and decode frames Frame compilation also has a lower priority than other tasks such as capturing data If the analyzer is busy capturing data frame compilation may fall behind When the analyzer catches up the green circle changes to either a green dot or no dot e Another reason is if some data in the frame is context dependent and we don t have the context An example is a compressed header where the first frame gives the complete header and subsequent frames just give information on what has changed If the analyzer does not capture the first frame with the complete header it cannot decode subsequent frames with partial header information A magenta triangle indicates that a bookmark is associated with this frame Any comments associated with the bookmark appear in the column next to the bookmark symbol 4 4 1 11 4 Decode Pane The Decode pane aka detail pane is a post process display that provides a detailed decode of each frame im transaction sometimes referred to as a frame The decode is presented in a layered format that can be expanded and collapsed depending on which layer or layers you are most interested in Click on the plus sign to expand a layer The plus sign changes to a minus sign Click on the minus sign to collapse a layer Select Show All or Show Layers from the Format menu to expand or collapse all the layers Layers retain their expanded or collapsed state between frames v Protoco
19. 02 04 7685 00 00 00 0 1 27 2015 10 02 04 7792 00 00 00 0 1 27 2015 10 02 04 7842 on non BO NS Total Frames 6 767 Frames Filtered In 6 017 Frame s Selected 1 1 total Figure 4 27 Front Display Filtered on Access Address Ox8e89bed6 In the figure above is an example Bluetooth low energy data set connection filtered on Access Address Ox8e89bedb The Frame Display in the front is the filtered data set One way to note the difference between the original and the filtered display is to observe the Protocol Tabs In the filtered display there are four low energy protocol tabs as compared to nine in the original display This access address connection is not using five of the protocols From any open Frame display the user can set another Connection Filter based on the original data set Display Example 2 All 802 11 data filtered in In this example there is a capture file with Classic Bluetooth Bluetooth low energy and 802 11 To view just the 802 11 data set 802 11 All is selected from the right click pop up menu ae Joe Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual O Frame Display BTAmp80211FTPwLE cfa File Edit View Format Filter Bookmarks Options Window Help 2 6 VE S20 90 PUUSumMe rem OE amp Cooo RR P ser iow LE AD Ad wD ata Field Tromeated or blot Present Unfiltered Info Errors o This is the Decode Pane Baseband LMP PreConnection F
20. 7 General Information Table 7 4 Communications Control Characters continued i_naractel DY 7 2 7 The Frontline Serial Driver ComProbe software uses custom versions of the standard Windowss serial drivers in order to capture data These drivers are usually installed during the routine product installation However if you need to install the serial driver after ComProbe software has already been installed please refer to the instructions available in the Setup folder installed under Start Programs Product Name and version Setup How to Install the FTS Serial Driver 7 2 8 DecoderScript Overview The DecoderScript Reference Manual and User Guide is delivered with each Frontline ComProbe Protocol Analysis System installation package under Developer Tools The manual is also available on line at FTE com The main purpose of this manual is to describe DecoderScript the language used in writing decoders DecoderScript allows you to create new decoders or modify existing decoders to expand the functionality of your ComProbe protocol analyzer DecoderScript displays protocol data checks the values of fields validates checksums converts and combines field values for convenient presentation Decoders can also be augmented with custom C coded functions called methods to extend data formatting validation transformations and so on A decoder defines field by field how a protocol message can be taken apart and di
21. 7b 96 bi eb d7 90 0 5 7 5 2012 6 05 23 995066 PM 18 ff ae 00 15 aa d6 be 89 8e 00 13 7b 96 bi eb d7 90 0 6 7 5 2012 6 05 23 995691 PM 4e ff b7 00 15 aa d6 be 89 8e 00 13 7b 96 bi eb d7 90 0 4 mW b Figure 4 12 Sample Exported Frames Text File 4 4 1 11 Panes in the Frame Display 4 4 1 11 1 Summary Pane The Summary pane E displays a one line summary of every frame in a capture buffer or file including frame number timestamp length and basic protocol information The protocol information included for each frame depends on the protocol selected in the summary layer box located directly below the main toolbar On a two channel circuit the background color of the one line summary indicates whether the frame came from the DTE or the DCE device Frames with a white background come from the DTE device frames with a gray background come from the DCE device The ComProbe USB Summary pane in displays a one line summary of every transaction in a capture buffer or 54 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data file Whenever there is a transaction it is shown on a single line instead of showing the separate messages that comprise the transaction The Msg column in that case says Transaction Each message in a transaction contains a packet identifier PID All of the PIDs in a transaction are shown in the transaction line All IN transactions i e transactions that contain an IN token message
22. Add or Modify Bookmark Li icon on one of the toolbars or c Right click on the frame event and choosing Add Bookmark 3 In the dialog box add a comment up to 84 characters in the text box to identify the bookmark 4 Click OK Once you create a bookmark it will be saved with the rest of the data in the cfa file When you open a cfa file the bookmarks are available to you 111 Chapter 5 Navigating and Searching the Data ComProbe USB User Manual Modify 1 Select the frame or event with the bookmark to be edited 2 There are three ways to access the Add Modfy Bookmark dialog a Select Add or Modify Bookmark from the Bookmarks menu on the Frame Display and Event Display b Select the Add or Modify Bookmark Ly icon on one of the toolbars or c Right click on the frame event and choosing Modify Bookmark on the selection 3 Change the comment in the dialog box 4 Click OK The edited bookmark will be saved as a part of the cfa file 5 You can also select Display All Bookmarks LO from the Frame Display and Event Display toolbar or the Bookmarks menu the Find window will open on the Bookmark tab Select the bookmark you want to modify and click the Modify button Change the comment in the dialog box and click OK Delete 1 Select the frame or event with the bookmark to be deleted 2 There are three ways to access the Add Modfy Bookmark dialog a Select Add or Modify Bookmark from the Bookmarks menu on the
23. Bluetooth Applicability A connection device pair is identified by 1 A Link for Classic Bluetooth 2 An Access Address for Bluetooth low energy The link ID is a number that the ComProbe software assigns to identify a pair of devices in a BR EDR connection In the Frame Display details pane the Baseband layer contains the link ID field if the field s value is not O An Access Address is contained in every Bluetooth low energy packet The Access Address identifies a connection between a slave and a master or an advertising packet Connection filtering displays only the frames protocols summary details and events for the selected connections S Note Connection Filters are not persistent across sessions 4 4 1 13 2 1 Creating a Connection Filter In the Frame Display there are four ways to create a connection filter From the Frame Display Filter menu Click on the Frame Display Filter menu Connection Filter selection From the drop down menu select Classic or Bluetooth low energy The options are 71 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual e Classic Bluetooth o All will filter in all Classic Bluetooth frames You are in effect filtering out any Bluetooth low energy frames and are selecting to filter in all the Classic Bluetooth links o Links displays all the master slave links You can select only one link to filter in The selected link will filter in only the frames associated with that link
24. Change Text Highlight Color be different from that in the Event pane See Physical vs memo bo Logical Byte Display for more information ASCI 7 bit ASCI Colors are used to show which protocol layer each byte belongs to The colors correspond to the layers listed in the EBCDIC Decode pane Baudot The Event Radix Binary Character and Decode panes are all synchronized with one another Clicking on an element in any one of the panes highlights the corresponding element in all the other panes 59 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual 4 4 1 11 7 Binary Pane The Binary pane displays the logical bytes in the frame in binary Because the Binary pane displays the logical bytes rather than the physical bytes the data in the Binary pane may be different from that in the Event pane See Physical vs Logical Byte Display for more information Colors are used to show which protocol layer each byte belongs to The colors correspond to the layers listed in the Decode pane The Event Radix Binary Character and Decode panes are all synchronized with one another Clicking on an element in any one of the panes highlights the corresponding element in all the other panes 4 4 1 11 8 Event Pane The Event pane shows the physical bytes in the frame You can choose between iu displaying only the data events or displaying all events by clicking the All Events icon a Ja FF 3p 1f Hh x5 kA T
25. ComProbe USB User Manual Chapter 5 Navigating and Searching the Data Find as the name suggests is a comprehensive search function that allows users to search for strings or patterns in the data or in the frame decode You can search for errors control signal changes bookmarks special events time and more Once the information is located you can easily move to every instance of the Find results 5 1 1 Searching within Decodes Searching within decodes lets you to do a string search on the data in the Decode Pane of the Frame Display window To access the search within decodes function 1 Opena capture file to search Open the Event Display PD or Frame Display window 3 Click on the Find icon Ah or choose Find from the Edit menu 4 Click on the Decode tab of the Find dialog Note The tabs displayed on the Find dialog depend on the product you are running and the content H of the capture file you are viewing Decode Paten Time GoTo Special Everd Bookmark Search For Sting In Decode Jigncee care C Search Fee All Errore eo Seach Fo Frame Enge Oniy oO Search Fie cong Sata Figure 5 2 Find Decode Tab Search for String 95 Chapter 5 Navigating and Searching the Data ComProbe USB User Manual Oecede Patter Time GoTo 5pecid Event Signal Emor Bor O Search For Sting In Decode C lgnere cate C3 Seach For All Emors Hele O Search For Frame Enos Oink O Search Far Informat
26. Delta 00 00 00 017002 Currenty selected 236 to 237 2 Events Delta 00 00 00 017002 l Selected time 7 21 2011 5 22 31 657908 PM to 7 21 2011 5 22 31 657908 PM For Help Press F1 Figure 4 45 USB Signal Display Window J Signal Display BPA 600 with HSU HCI Edit View Signals Options Window Help i Pa i 7A i PN i m a H Al mad ma ke nd i FH H Tr i HA IAL 2 ATS 3 CTS 4 OSA 5 OTR 6 CO 7 Fl Figure 4 46 HSU Signal Display Window 4 6 2 Signal Display Toolbar Table 4 7 Signal Display Toolbar Home brings the Control window to the front Take New Snapshot Takes a new picture of the capture buffer If you are capturing data when you open the Signal Display window the window shows only the state of the control signals that were in the buffer when the window was opened Click this button to update the window with the contents of the current buffer 91 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual Table 4 7 Signal aes Toolbar continued a eee ox ta Q Zoom In Zooms in on the signal display How much you zoom in is determined by your selection in the Signals menu You can zoom in by a factor of 2 4 or 8 Zoom Out Reverse of Zoom In Zoom to Selection Zooms to show only the region highlighted on the screen If the highlighted area contains few events the Signal Display window may also display additional events in order to f
27. Frame Display Status Bar 48 Frame Display Toolbar 45 Frame Display Window 43 Frame Recognizer Change 40 Frame Symbols 58 Frame Information on the Control Window 13 Freeze 37 FS 139 FTS Serial Driver 140 Go To 101 Green Dots in Summary Pane 58 GS 138 Hex 38 Hexadecimal 59 Hiding Display Filters 67 Hiding Protocol Layers 48 High Resolution Timestamping 132 HT 139 I O Settings Change 40 Icons in Data on Event Display 40 Importable File Types 115 Importing Capture Files 115 INCLUDE 64 ComProbe USB User Manual Include Exclude 64 Keyboard 28 Layer Colors 61 LF 139 Live Update 37 Logical Byte Display 49 Logical Bytes 49 Long Break 41 Low Power 41 Main Window 10 Message Sequence Chart 77 Message Sequence Chart Find and Go To 82 Message Sequence Chart Go To 83 Microsoft Keyboard 28 Minimizing 16 Missing Decode Information 26 Mixed Channel Sides 39 Mixed Sides Mode 39 Modem Lead Names 129 Modem Leads 90 Modify Display Filters 69 70 Multiple Event Displays 36 Multiple Frame Displays 52 N New Snapshot 93 NK 139 Node Filters 67 Nonprintables 122 150 Appendicies Notes 114 NU 138 Number Set 38 Numbers 137 Octal 38 Open 36 Open Capture File 115 Options 89 93 123 125 126 130 Other Term Subterm 15 Override Decode Information 27 Overriding Frame Information 32 Overrun Errors 108 Panes 52 Pattern 97 Performance Notes 89 133 Printing 118 Printing fr
28. Frame Display and Event Display b Select the Add or Modify Bookmark Lil icon on one of the toolbars or c Right click on the frame event and choosing Modify Bookmark on the selection 3 Click on the Delete button The bookmark will be deleted 4 You can also select Display All Bookmarks O from the Frame Display and Event Display toolbar or the Bookmarks menu the Find window will open on the Bookmark tab Select the bookmark you want to delete and click the Delete button 5 2 2 Displaying All and Moving Between Bookmarks There are three ways to move between bookmarks 1 Press the F2 key to move to the next frame or event with a bookmark 2 Select Go to Next Bookmark from the Bookmarks menu 3 Click the Display All Bookmarks icon Ll Select the bookmark you want to move to and click the Go To button or simply double click on the bookmark Click the Move Forward and Move Back buttons to cycle through the bookmarks 112 ComProbe USB User Manual Chapter 5 Navigating and Searching the Data Find dual mode capture 01 cfa Figure 5 14 Find Window Bookmark tab Used to Move Around With Bookmarks To delete a bookmark select it and click the Delete button To modify a bookmark select it and click the Modify button Click Remove All to delete all the bookmarks 113 Chapter 6 Saving and Importing Data 6 1 Adding Comments to a Capture File The Notes feature allows you to add commen
29. Go ob O0 00 1 11055 32 692 TYPE 2 DH3 56 00 00 00 0 4 13 2075 10 56 32 6941 Bae Payload Data Rate 3 Mbps 1 00 00 00 0 4713 2015 10 55 32 701 Figure 4 23 Connection Filter from the Frame Display Menu From the Frame Display toolbar Right click anywhere in the toolbar and select Connection Filter from the pop up menu The procedure for creating a connection filter are identical as described in From the Frame Display Filter menu above Frame Display TestFileSlimmer cta File Edit View Format Live Filter Bookmarks Options Window Help B gy eonan VES ee BO Sl All 1 Frame 6 471 Ma Connection Filter k Classic Re A A si li kal od a Errors Bluetooth low energy Link 0 s 3 e Baseband H Show Hidden Panes cicu kia 1 E Baseband faseband PreConnection FHS SCO eSCO Sum z Header Length 11 4 i Header Version 3 B Frame Pr Access Add CRC BDSDOR Fram Delta Timestamp a a E maid 6 463 17 4 13 2015 10 55 32 661 Figure 4 24 Connection Filter from the Frame Display Toolbar right click sJ ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data From the Frame Display panes Right click anywhere in a Frame Display pane and select Connection Filter in the pop up menu The procedure for creating a connection filter are identical as described in From the Frame Display Filter menu above p 2 Frame Display
30. O ata na pe es re ns ee gow eles eae BG eee 136 TZ A PROS OSS Balls AA AA AA 137 7 2 5 Event Numbering 222 c ce eee cece cee cee cece cece cece aao cence eceeeceeceeceeceeceeeeeees 137 7 2 6 Uset l Character Tables Aa ek ee es eee ee ee 137 Pel Oe POW COC CS oo ca ea cence tae e ete neon ees weenie ceacned dan uectonacetsuseuamavaweuececas 137 Jaa a2 FAQ OE COU AA 138 7270 SE BCOC COGCS AA AA 138 7 2 6 4 Communication Control Characters 0 2 2 c eee ee eee eee eee 138 72 fF 1e Prone Serial DAET BA NEA TAGA NA NMA AA ANG Da PIA BEA ANAN ECAS 140 7 2 8 DecoderScript Overview cece eee cc cee cece ee cee eee eee cece ence eee eceeeeeeeeeeeees 140 7 2 9 Bluetooth low energy ATT Decoder Handle Mapping 0 eee cece ce eceeceeceeees 141 7 3 Contacting Technical Support _ 2 22 oie eee cece cece cece eee cece cece cece eeeeeeeeeeees 142 Appendicies a 143 Appendix A Application Notes lee cece cece cece cece cece cece ee ceeeeeeeceeceees 145 List of Figures Figure 2 1 ComProbe USB Front Panel _ 2 22 22 aa 4 Figure 2 2 ComProbe USB Back Panel aaa aa cece dessheddueusesneceuaade centdedessGupesduhdcuiencdees 5 Figure 2 3 ComProbe USB Top LEDS cccchcceccecesddceeseluntedaceuduseeasedadiasodeavcdesecense Ls kah 5 Figure 2 4 mini DIN Connector Pin Location 22 leeeeeeeeeeee 5 Figure 2 5 Connecting Only One Device Under Test
31. Options Store Timestamps This item takes effect immediately Capture Options storage Resolution 0 50 Microseconds high resolution 7 Cancel Note 1 To apply resolution changes you must restart the program Help Note 2 Finer resolutions increase the capture file size Click Help for more information on how timestamps affect sistem performance Display Options Display Raw Timestamp Value Display Relative Timestamps Number of digits to display to the right of the decimal point Figure 7 1 Timestamping Options dialog 7 1 4 2 Enabling Disabling Timestamp To enable timestamping click to make a check appear in the check box Store Timestamps This time takes effect immediately Removing the check will disable timestamping 7 1 4 3 Changing the Timestamp Resolution This option affects the resolution of the timestamp stored in the capture file The default timestamp is 10 milliseconds This value is determined by the operating system and is the smallest normal resolutions possible Note The raw timestamp value is the number of 100 nanosecond intervals since the beginning of H January 1 1601 This is standard Windows time It is also possible to use high resolution ag E l l timestamping High resolution timestamp V Store Timestamps This item takes effect immediately values are marked by an asterisk as high Capture Options resolution in the drop down list To change Storage Resolution 0 50 Mi
32. Own from the list H4DS with autotraverse and click Next MWS Wireless Coexistence Interface 2 3 The system displays an information screen that may help you decide if you need to define your own custom stack Defining a custom stack means that the analyzer uses the stack for every frame Frames that do not conform to the stack are decoded Curent Protocal Stack Remove Selected tem From List incorrectly Click Next to continue telect a Protocol Stack Choose one at a time by Protocol Decode Stack double clicking or by using Ml additional stack laver Baseband Select Protocols aka Naguiat e AMP Manage automatically 1 Select a protocol from the list on the ARP There are no additional left stack layers 2 Click the right arrow button to move it gia to the Protocol Decode Stack box ee i i ignaling on the right or double click the AVRCP Mene HA protocol to move it to the right jaseband Move Down 3 Toremove a protocol from the stack BlueCore Serial Protocol 7 a double click it or select it and click the lama left arrow button 4 If you need to change the order of the protocols in the stack select the protocol you want to move and click on the Move Up and Move Down buttons until the protocol is in the correct position 5 The lowest layer protocol is at the top of the list with higher layer protocols listed underneath Auto traversal Have the analyzer Determine Higher Layers If you need to de
33. Selecion B021 AJDP AMP klanag bts Frame Range Delete Fie Note Browse pani options may alfect whether any gray background is parted See Help lor mio Figure 6 1 Frame Display Print Dialog 5 Select the range of frames to include All or Selection in the Frame Range section of the Frame Display Print dialog Choosing All prints up to 1000 frames from the buffer Choosing Selection prints only the frames you select in the Frame Display window 6 Selecting the Delete File deletes the temporary html file that was used during printing 7 Click the OK button Frame Display Print Preview The Frame Display Print Preview feature provides the user with the option to export the capture buffer to an html file The maximum file size however that can be exported is 1000 frames If you chose Print Preview the system displays your data in a browser print preview display with options for printing such as page orientation and paper size You can also use your Printer Preferences dialog to make some of these selections When printing your data the analyzer creates an html file and prints the path to the file at the bottom of the page This file can be opened in your browser however it may appear different than the printed version 1 Select Print Preview from the File menu on the Frame Display window to display the Frame Display Print Preview 117 Chapter 6 Saving and Importing Data ComProbe USB User Manual Frame Displ
34. TestFileSlimmer cta File Edit View Format Liwe Filter Ge Old sa Frame 6 471 Master Len 289 Errors i Baseband Packet Status CRC Error 20 5 Baseband Header Length 11 Header Version 3 B Bookmarks Options Window Help PE 6 YF es fh DO DOE 680009 mE Data Errors Baseband PreConnection FHS SCO eS5CO Husa A A Q Sum Frame Pr 6 463 Access Add CRC BDADDOR Delta Timestamp HS I ie ike Deonde Pame 4 13 2015 10 55 37 661 Copy Selection to Clipboard Select Entire Frame Expand Decode Pane Collapse All Nodes Expand All Nodes Connection Filter 5 464 6 465 5 466 6 467 6 466 5 469 6 470 6 47 Classic k 00 00 00 0 00 00 00 0 00 00 00 0 00 00 00 0 00 00 00 0 00 00 00 0 00 00 00 0 00 00 00 0 00 00 00 0 00 00 00 0 4713 2015 10 55 32 660 41272015 10 55 32 671 4713 2015 10 55 32 69001 4713 2015 10 55 32 692 4773 2015 10 55 32 6941 41372015 10 55 32 701 4713 2015 10 55 32 7051 4713 2015 10 55 32 711 4713 2015 10 55 32 711 4713 2015 10 55 32 14 Bluetooth low energy 00 00 00 0 441342015 10 55 32 7201 a AG Mm Provide L2CAP Rules Set Subsequent Decoder Parameters Hide This Pane Show Hidden Panes Figure 4 25 Connection Filter from the Frame Display Pane right click From the Frame Display frame selection Select a frame in the su
35. This window allows you to change the window refresh rate and choose which control signals to display 4 5 4 Selecting Breakout Box Options To access Options click the Options icon a on the Breakout Box toolbar or choose Breakout Box options under the Options menu Display Signal This box shows which control signals the analyzer monitors e Acheck mark next to a control signal name indicates that the breakout box displays the status of that control signal e To prevent the analyzer from displaying the status of a signal un check the box next to it Window Refresh Rate The refresh rate is the rate at which the analyzer updates the window e By default the analyzer refreshes the display once every 1 000 milliseconds one second e To change the rate highlight the number in the box and enter a new number See Performance Notes for information on how Window Refresh Rate can affect performance Indicators You can choose what type of indicators the analyzer uses e The default indicators are a green sign to show a logically high state and a red sign to show a logically low state e To change the indicators click on the down arrow and choose a pair of indicators from the list e Asareminder the analyzer gives the definition of the indicators in the top part of the Breakout Box window 4 5 4 1 Performance Notes As a software based product the speed of your computer s processor affects the analyzer s performance B
36. a Custom Stack on page 30 1 If you select a custom stack i e one that was defined by a user and not included with the analyzer the Remove Selected Item From List button becomes active 2 Click the Remove Selected Item From Listbutton to remove the stack from the list You cannot remove stacks provided with the analyzer If you remove a custom stack you need to define it again in order to get it back If you are changing the protocol stack for a capture file you may need to reframe See Reframing on page 31 for more information You cannot select a stack or change an existing one for a capture file loaded into the Capture File Viewer the Capture File Viewer is used only for viewing capture files and cannot capture data Protocol Stack changes can only be made from alive session 29 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual 4 2 2 Creating and Removing a Custom Stack To create a custom stack Ye PA 1 Choose Protocol Stack from the Select a protocol stack Options menu on the Control Build Your Own window or click the Protocol Stack 802 11 MAC 802 11 Radio icon on the Frame Display Air Sniffer 7 BlueCore Serial Protocol BCSP from Cambridge Silicon Radio with autotraverse Bluetooth HC UART H4 with autotraverse toolbar Bluetooth HCI USB with autotraverse Bluetooth virtual transport with autotraverse E Fictitious Protocol with autotraverse 2 Select Build Your
37. a simple text editor like Notepad save it as an ANSI ASCII file then use it in your decoder These files are installed in the FTE directory of the system Common Files directory The readme file in the root directory of the protocol analyzer installation contains a complete list of included files Most files are located in My Decoders and My Methods We will be updating our web site with new and updated utilities etc on a regular basis and we urge decoder writers to check there occasionally 140 Chapter 7 General Information ComProbe USB User Manual 7 2 9 Bluetooth low energy ATT Decoder Handle Mapping Low energy device attributes contain a 16 bit address called the attribute handle Each handle is associated with an attribute Universally Unique Identifier UUID that is 128 bits long In the attribute database the handle is unique while the UUID is not unique The ComProbe software detects and stores the relationships mappings between handle and UUID during the GATT discovery process But sometimes there is no GATT discovery process because e The discovery has previously taken place and both devices stored the mappings and the discovery will not repeat at every subsequent connection e The developer owns both devices in the conversation and chose to ignore discovery because the mappings are known e The devices are in development and the code to perform the mappings has not been written yet The solution to this problem
38. and long and short breaks are all events as are I O Settings changes and Data Capture Paused and Resumed 40 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Table 4 3 Event Symbols continued Long Break KE Low Power The battery in the ComProbe is low 2 Short Break LE jp Event SPY Mode only SPY events are commands sent by the application being spied on to the UART Star of Frame Marks the start of a frame o banana akap CO Na aba CC Na aaa o iy Sync Hunt Entered Sync Lost Test Device Stopped Responding The analyzer lost contact with the ComProbe for some reason often because there is no power to the ComProbe Test Device Test Device Began Responding The analyzer regained contact with the ComProbe Responding The analyzer regained contact with the Test Device Began Responding The analyzer regained contact with the ComProbe T Timestamping Disabled Timestamping was turned off Events following this event are not timestamped Timestamping Enabled Timestamping was turned on Events following this event have timestamps Truncated Frame A frame that is not the same size as indicated within its protocol Unknown Event 4 3 7 6 Font Size The font size can be changed on several Event Display windows Changing the font size on one window does not affect the font size on any other window To change the font size 41 Chapter 4 Capturing and Ana
39. and the DCE sides in the above example then the analyzer finds the second pattern followed by the third pattern but not the first pattern This is because each side has one instance in which the whole pattern can be found The analyzer completely searches the DTE side first followed by the DCE side A Note Side Restriction is available for pattern and error searching 1 Select one of the two options 2 Select DTE DCE or both 3 When you made your selections click on the Find Next or Find Previous buttons to start the search from the current event The result of the search is displayed in the Decode pane in Frame Display 5 1 2 Searching by Pattern Search by Pattern lets you perform a traditional string search You can combine any of the formats when entering your string and your search can include wildcards To access the search by pattern function 1 Opena capture file to search 2 Open the Event Display PD or Frame Display window 97 Chapter 5 Navigating and Searching the Data ComProbe USB User Manual 3 Click on the Find icon AA or choose Find from the Edit menu 4 Click on the Pattern tab of the Find dialog Note The tabs displayed on the Find dialog depend on the product you are running and the content V4 of the capture file you are viewing Decode Patten Time Go To Special Events Bookmark Enter Hex values as xx Ignore case Find Previous Binary values as kbbbbbbbb Co
40. are shown with a purple background All other transactions and all non transactions are shown with a white background IN transactions have special coloring because that is the only place where the primary data flow is from a device to the Host The protocol information included for each frame depends on the protocol selected in the summary layer box located directly below the main toolbar Frame numbers in red indicate errors either physical byte level or frame errors If the error is a frame error in the displayed protocol layer the bytes where the error occurred is displayed in red The Decode Pane gives precise information as to the type of error and where it occurred The Summary pane is synchronized with the other panes in this window Click on a frame in the Summary pane and the bytes for that frame is highlighted in the Event pane while the Decode pane displays the full decode for that frame Any other panes which are being viewed are updated accordingly If you use one pane to select a subset of the frame then only that subset of the frame is highlighted in the other panes Protocol Tabs Protocol filter tabs are displayed in the Frame Display above the Summary pane e These tabs are arranged in separate color coded groups These groups and their colors are General white Classic Bluetooth blue Bluetooth low energy green 802 11 orange USB purple and SD brown The General group applies to all technologies The othe
41. both number and character mode Number Only Controls whether the analyzer displays data in both character and number format or just number format Click once to show only numeric values and again to show both character and numeric values s965 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual All Events Controls whether the analyzer shows all events in the window or only data bytes Events include control signal changes and framing information Timestamping Options Brings up the timestamping options window which has options for customizing the display and capture of timestamps 4 3 3 Opening Multiple Event Display Windows Click the Duplicate View icon dg from the Event Display toolbar to open a second Event Display window You can open as many Event Display windows as you like Each Event Display is independent of the others and can show different data use a different radix or character set or be frozen or live The Event Display windows are numbered in the title bar If you have multiple Event Displays open click on the Event Display icon po on the Control window toolbar to show a list of all the Event Displays currently open Select a window from the list to bring it to the front 4 3 4 Calculating CRCs or FCSs The cyclic redundancy check CRC is a function on the Event Display window used to produce a checksum The frame check sequence FCS are the extra checksum characters added to a frame to d
42. cece cece cece cece ceeeceecesceeceeeees 90 4 6 2 Signal Display Toolbar eee eee ccc ce ce ccc eee cee cece eee cee eeeeeeeeeeees 91 4 6 3 Reading the Signal Display 22 22 a 92 4 6 4 Selecting Signal Display Options ee eee eee cee cee eee eee cece ee eeeeeeeeees 93 Chapter 5 Navigating and Searching the Data Uu Ha 94 SR AA E E A 94 5 1 1 Searching within Decodes _ 22 22 eee cece ce cee cee cece cece cece cece eeeeceeceeceeceeeees 95 5 1 2 Searching by Pattern eee cece cee ec cece eee cece cence eee eeeeeeeeeeeeeeee 97 5 1 3 Searching by Time __ 2 22 ec cc cc cc cee cee cece cece cece eee e cence eeceeceeceeceeeeees 99 De SI GO NG a KAG Ana AGA Seren ced as ana NG oe ead Sones 101 5 1 5 Searching for Special Events eee ee cee ee cece eee e cece cece cece eceeceeceeceeeeeees 102 S6 Searching Dy Signal cen oeeen fees cet renar eae ee a ae esate eee a Eaa ee uate eee 103 ComProbe USB User Manual 5 1 7 Searching for Data ErrorsU aaan aaa aaa aa eee ce cee eee eee cence scenes 107 Bl IMG BOORMAN KSt ay oper eroeeee seen gcdaokons baseeue seen etumar cesses necsuct see ctecst wears eeer 109 5 1 9 Changing Where the Search Lands 0 eee ee eee cece cece cece eee eeeeeeeceeees 110 5 1 10 Subtleties of Timestamp Searching c eee eee cece cece eee ee cece eeceeeeeeceees 111 Be AA 111 5 2 1 Adding Modifyi
43. depressed on the Event Display window or Frame Display Event pane choose All Events Number If the Show All Events button is up choose Data Event Number 5 1 5 Searching for Special Events Frontline inserts or marks events other than data bytes in the data stream For example the analyzer inserts start of frame and end of frame markers into framed data marking where each frame begins and ends If a hardware error occurs the analyzer shows this using a special event marker You can use Find to locate single or multiple special events To access the search for special events function 1 Opena capture file to search 2 Open the Event Display PP or Frame Display 6 window 3 Click on the Find icon Ah or choose Find from the Edit menu 4 Click on the Special Events tab of the Find dialog Note The tabs displayed on the Find dialog depend on the product you are running and the Si content of the capture file you are viewing 102 ComProbe USB User Manual Chapter 5 Navigating and Searching the Data Decode Paten Time GoTo Speca Everti Bookmark Abod Begin Char Sinp C Broken Frame T Butter O vesiiow C Capture Paused C Capture Resumed Cl Dropped Franss C Dropping Sync C End Char Stnp C End of Frame C Flow Control Active 7 Flow Control Inactree Frame Recognize Changed 110 Settings Changed Figure 5 8 Find Special Events tab 5 Check the event or events you want to look for in t
44. di My Log Files gt di My Methods d My Node Databases _ lb e Figure 7 5 File Locations Browse dialog 5 Click OK 6 Click OK when finished 128 Chapter 7 General Information ComProbe USB User Manual If a user sets the My Decoders directory such that it is up directory from an installation path multiple instances of a personality entry may be detected which causes a failure when trying to launch Frontline For example if an Frontline product is installed at C Users Public Public Documents Frontline Test Equipment My Decoders then My Decoders cannot be set to any of the following e C My Decoders e C Users My Decoders e C Users Public My Decoders e C Users Public Public Documents My Decoders e or to any directory that already exists in the path C Users Public Public Documents Frontline Test Equipment My Decoders Default Capture File Folder Checkbox If the Use Last Opened Folder for Capture Files checkbox is checked then the system automatically changes the default location for saving capture files each time you open a file from or save a file to a new location For example let s say the default location for saving capture files is Drive A gt Folder A Now you select the Use Last Opened Folder for Capture Files checkbox The next time however you open a capture file from a different location Folder B gt Removable Flash Drive for example Now when you save the capture file it will be
45. error A buffer overflow always causes a broken Control Signal Change One or more control signals changed state Click on the symbol and the analyzer displays which signal s changed at the bottom of the Event Display window O Data Capture Paused The Pause icon was clicked pausing data capture No data is recorded while capture is paused Ira Data Capture Resumed The Pause icon was clicked again resuming data capture Dropped Frames Some number of frames were lost Click on the symbol and the analyzer displays many frames were lost at the bottom of the Event Display window End of Frame Marks the end of a frame Flow Control Active An event occurred which caused flow control to become active i e caused the analyzer to stop transmitting data Events which activate flow control are signal changes or the receipt of an XON character Flow Control Inactive An event occurred which caused flow control to become inactive i e caused the analyzer to transmit data Events which deactivate flow control are signal changes or the receipt of an XOFF character Frame Recognizer Change A lowest layer protocol was selected or removed here causing the frame recognizer to be turned off or on pi I O Settings Change A change was made in the I O Settings window which altered the baud parity or other circuit setting lAn event is anything that happens on the circuit or which affects data capture Data bytes control signal changes
46. hub Device Under Test Figure 2 7 Correct Connection With More Than One Device Under Test 2 1 2 3 Connection Tips Most performance problems such as input buffer overflow are the result of improper connections Chapter 2 Getting Started ComProbe USB User Manual To achieve optimal performance from the USB analyzer we recommend the following configuration e Use two high speed computers one for the ComProbe analyzer and one for the device under test e Use USB 2 0 connections e Use cables that do not exceed the recommended maximum lengths the cable connected to the analysis computer should not exceed 5 meters 15 feet and the combined length of the cables connected to the test computer and the device under test should not exceed 3 meters 9 feet Although it is possible to use one computer as both the analysis and the test computer this requires that the computer in use is high speed and has two or more host controllers available If the operating system encounters an error when trying to install a ComProbe device simply disconnect the device then reconnect it and try again 2 2 Data Capture Methods This section describes how to load Frontline Test Equipment Inc ComProbe Protocol Analysis System software and how to select the data capture method for your specific application 2 2 1 Opening ComProbe Data Capture Method On product installation the installer creates a folder on the windows desktop labeled Frontli
47. in the buffer to where you are click the Find Previous button 5 1 8 Find Bookmarks Searching with Bookmarks allows you search on specific bookmarks on the data in Frame Display and Event Display window Bookmarks are notes reminders of interest that you attach to the data so they can be accessed later To access the search for bookmarks 1 Opena capture file to search 2 Open the Event Display or Frame Display 5 window 3 Click on the Find icon AA or choose Find from the Edit menu 4 Click on the Bookmarks tab of the Find dialog Note The tabs displayed on the Find dialog depend on the product you are running and the content of the capture file you are viewing 109 Chapter 5 Navigating and Searching the Data ComProbe USB User Manual Find Ethernet Sniffer Decode Patten Time GoTo Special Everts Bookmark Franek d Book 44 First emor 12 6 2010 11 2548 18062 Forward Frames 106 Souta kinconect 12 6 2010 11 25 56 7c Frame 108 The tenestamnp seems ko be off on thee frome 12 GoTo Figure 5 12 Find Bookmark tab There are several ways to locate bookmarks e Select the bookmark you want to move to and click the Go To button e Simply double click on the bookmark e Click the Move Forward and Move Back buttons to move through the frames to the bookmarks shown in the window When the bookmark is found it is highlighted in the window There are three ways to modify bookmarks 1 Click on Delet
48. is first opened Protocol Tabs Protocol filter tabs are displayed in the Frame Display above the Summary pane 43 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual e These tabs are arranged in separate color p coded groups These groups and their Noes Og Classic Bluetooth blue colors are General white Classic Bluetooth Mikas towmati le mer LE BR LE PET LE ADY m ae blue Bluetooth low Energy green meem Mem Data D Bluetooth low energy green 802 11 orange USB purple NFC brown and SD teal The General group applies to _ ILA t ies 3 all technologies The other groups are FAKE 802 11 orange Fryti NG at technology specific app e Clicking on a protocol filter tab in the General group filters in all packets containing that protocol regardless of each packet s technology e Clicking on a protocol filter tab in a technology specific group filters in all packets containing that protocol on that technology e A protocol filter tab appears in the General group only if the protocol occurs in more than one of the technology specific tab groups For example if L2CAP occurs in both Classic Bluetooth and Bluetooth low energy there will be L2CAP tabs in the General group the Classic Bluetooth group and the Bluetooth low energy group Select the Unfiltered tab to display all packets There are several special tabs that appe
49. is to 1 define the mappings in a file and 2 then pre loading the mapping using the ComProbe software Creating handle UUID mapping file Create a file named ATT_Handle_UUID_Preload ini in the root directory of C Users Public Public Documents Frontline Test Equipment My Decoders but the file can be located anywhere Assume that you want to create a GATT service starting at handle 1 Create a section in the ini file called Service Base Handles A 1 A will be your first service Make the base handle equal to the handle of your service You can use all upper and lower case letters so you can have up to 52 service handles Next add the following section Advertiser Handles Generic Access Profile GAP AO 1800 A1 2803 A2 2a00 A3 2803 A4 2a01 A5 2803 A6 2a04 A few tings of note e Inthe code above lines begging with a semi colon are comments e If you want to change the base handle of the GAP service change the 1 to some other number e If you want to comment out the entire service comment out the base handle If no A is defined the software will ignore A1 A2 and so on 141 ComProbe USB User Manual Chapter 7 General Information 7 3 Contacting Technical Support Technical support is available in several ways The online help system provides answers to many user related questions Frontline s website has documentation on common problems as well as software upgrades and utilit
50. not be captured accurately Normally when a control signal changes state from high to low or low to high an interrupt is generated by the UART and the analyzer goes to see what has changed and record it 136 Chapter 7 General Information ComProbe USB User Manual Ring Indicator works a little differently An interrupt is generated when RI changes from high to low but not when RI changes from low to high If Ring Indicator changes from low to high the analyzer does not know that RI has changed state until another event occurs that generates an interrupt This is simply the way the UART works and is not a deficiency in the analyzer software To minimize the chance of missing a Ring Indicator change the analyzer polls the UART every millisecond to see if RI has changed It is still possible for the analyzer to miss a Ring Indicator change if RI and only RI changes state more than once per millisecond UARTs in the 8250 family include 8250s 16450s 16550s and 16550 variants If you have any questions about the behavior of your UART and Ring Indicator please contact technical support 7 2 4 Progress Bars The analyzer uses progress bars to indicate the progress of anumber of different processes Some progress bars such as the filtering progress bar remain visible while others are hidden The title on the progress bar indicates the process underway 7 2 5 Event Numbering This section provides information about how events are nu
51. not present if no decoder is loaded that supports this feature Set Subsequent E Opens the Set Subsequent Decoder Parameters dialog Decoder where the user can override an existing parameter at any Parameters frame in the capture Each entry takes effect from the specified frame onward or until redefined in this dialog on a later frame This selection is not present if no decoder is loaded that supports this feature When checked this selection opens a dialog that asking for missing frame information When unchecked the analyzer decodes each frame until it cannot go further and it stops decoding This selection is not present if no decoder is loaded that supports this feature Automatically Request Missing Decoder Information Enable Disable Audio Expert When enabled the Audio Expert System is active other wise it is not available Only available when an Audio Expert System licensed device is connected System The Windows menu selection applies only to the Control window and open analysis windows Frame Display Event Display Message Sequence Chart Bluetooth Timeline Bluetooth low energy Timeline and Coexistence View All other windows such as the datasource are not affected by these selections AG Chapter 2 Getting Started ComProbe USB User Manual Table 2 7 Control Window Windows Menu Selections Ctrl W Arranges open analysis windows in a cascaded view with window captions visible Live amp Ca
52. reveal that filter in the Frame Display 1 Select Hide Show Display Filters from the Filter menu in the Frame Display window to open the Hide Show Filters dialog The system displays the Hide Show Filters dialog with a list of all user defined filters 2 Select the filter to be revealed from the combo box 3 Click the Show button 4 Click OK The Hide Show Filters dialog box closes and the system reveals the filter in the Frame Display You can also open the Quick Filter dialog and check the box next to the hidden filter to show or hide a display filter 68 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Hamed Filters Filtered ASC ow 7 Filter Filter Filter Hole Slave SCU link Supported Filters Figure 4 20 Using Named Filters Section of Quick Filters to Show Hide Filters not automatically appear in other Frame Display windows You must use the Hide Show dialog to display a filter created in one Frame Display in different Frame Display window 4 4 1 13 1 7 Editing Filters Pi Note When you have multiple Frame Display windows with a display filter or filters those filter do Modifying a Condition in a Filter 1 Click the Display Filters icon VW on the Frame Display window or select Apply Modify Display set Condition Ko Curentu Ache Condition Filteri Filters ASCI 3 Filters from the Filter menu to open the Set Condition dialog box The Set C
53. saved to Folder B gt Removable Flash Drive Also all subsequent files will be saved to that location This remains true until you open a file from or save a file to a different location There is one caveat to this scenario however Let s say you have selected Use Last Opened Folder for Capture Files and opened a file from a location other than the default directory All subsequent capture files will be saved to that location Suppose however the next time you want to save a capture file the new file location is not available because the directory structure has changed a folder has been moved a drive has been reassigned a flash drive has been disconnected etc In the case of a lost directory structure subsequent capture files will be saved to the default location ComProbe software will always try to save a file to the folder where the last file was opened from or saved to if Use Last Opened Folder for Capture Files is checked If however the location is not accessible files are saved to the default directory that is set at installation If the checkbox is unchecked then the system always defaults to the directory listed in the File Locations dialog 7 1 3 Side Names The Side Names dialog is used to change the names of objects and events that appear in various displays The Side Names dialog will change depending on the sniffing technology in use at the time the software was loaded Changes to the Names are used throughout the progr
54. selected bytes highlighted Display Capture Notes Brings up the Capture Notes window where you can view or add notes to the capture file Add Modify Bookmark Add a new or modify an existing bookmark Display All Bookmarks Shows all bookmarks and lets you move between bookmarks Find Search for errors string patterns special events and more Go To Opens the Go To dialog where you can specify which event number to go to CRC Change the algorithm and seed value used to calculate CRCs To calculate a CRC select a byte range and the CRC appears in the status lines at the bottom of the Event Display Mixed Sides Serial data only By default the analyzer shows data with the DTE side above the DCE side This is called DTE over DCE format DTE data has a white background and DCE data has a gray background The analyzer can also display data in mixed side format In this format the analyzer does not separate DTE data from DCE data but shows all data on the same line as it comes in DTE data is still shown with a white background and DCE data with a gray background so that you can distinguish between the two The benefit of using this format is that more data fits onto one screen Character Only The analyzer shows both the number hex binary etc data and the character ASCII EBCDIC or BAUDOT data on the same screen If you do not wish to see the hex characters click on the Character Only button Click again to go back to
55. side stops transmitting in the middle of a frame The range for this value is from O to 999 999 seconds Setting it to zero disables the timeout feature P Note This option is currently disabled 7 1 1 3 Selecting Start Up Options To open this window 1 Choose System Settings from the Options menu on the Control A window 2 On the System Settings window click the Start Up button 3 Choose one of the options to determine if the analyzer starts data capture immediately on starting up or not 126 Chapter 7 General Information ComProbe USB User Manual Program Start Up Options On piogram start wap Ce Don t start caphunng immediately O Silai capturing bo a file immeckateky O Start capturing immediately bo the folowing ile Figure 7 3 Start Up Options dialog e Don t start capturing immediately This is the default setting The analyzer begins monitoring data but does not begin capturing data until clicking the Start Capture icon on the Control Event Display or Frame Display windows e Start capturing to a file immediately When the analyzer starts up it immediately opens a capture file and begins data capture to it This is the equivalent of clicking the Start Capture icon The file is given a name based on the settings for capturing to a file or series of files in the System Settings window e Start capturing immediately to the following file Enter a file name in the box below this option
56. the Summary Pane You can modify the Summary Pane in Frame Display Summary pane columns can be reordered by dragging any column to a different position Fields from the Decode pane can be added to the summary pane by dragging any Decodepane field to the desired location in the Summary pane header If the new field is from a different layer than the summary pane a plus sign is prepended to the field name and the layer name is added in parentheses The same field can be added more than once if desired thus making it possible to put the same field at the front and back for example of along header line so that the field is visible regardless of where the header is scrolled to An added field can be removed from the Summary pane by selecting Remove New Column from the right click menu The default column layout both membership and order can be restored by selecting Restore Default Columns from the Format or right click menus Changing Column Widths To change the width of a column 1 Place the cursor over the right column divider until the cursor changes to a solid double arrow 2 Click and drag the divider to the desired width 3 To auto size the columns double click on the column dividers Hiding Columns To hide acolumn 1 Drag the right divider of the column all the way to the left 2 The cursor changes to a split double arrow when a hidden column is present 3 To show the hidden column place the cursor over the divider until it
57. the circuit even when data is not actively being captured These graphs allow you to keep an eye on what is happening on the circuit without requiring you to capture data JI ComProbe USB User Manual Chapter 2 Getting Started 2 3 4 Frame Information on the Control Window Frame Decoder information is located just below the Status bar on the Control window It displays two pieces of information For Help Press F1 e Frame Decoder 233 fps displays the number of frames per second being decoded You can toggle this display on off with Ctrl D but it is available only during a live capture e 132911 displays the total frames decoded e 100 displays the percentage of buffer space used 2 3 5 Control Window Menus The menus appearing on the Control window vary depending on whether the data is being captured live or whether you are looking at a cfa file The following tables describe each menu Table 2 3 Control Window File Menu Selections d k Capture GoLive Returns to Live mode els Reframe If you need to change the protocol stack used to interpret a capture file and the framing is different in the new stack you need to reframe in order for the protocol decode to be correct See Reframing on page 31 Removes start of frame and end of frame markers from your data SeeUnframing on page 31 Recreate This option is available when you are working with decoders If Companion File you change a decoder while work
58. will remove all decoder overrides If you do not have decoders loaded that require parameters the menu item does not appear and you don t need to worry about this feature 3 2 1 Decoder Parameter Templates 3 2 1 1 Select and Apply a Decoder Template 1 Select Set Initial Decoder Parameters from the Options menu on the Control window or the Frame Display 24 Chapter 3 Configuration Settings ComProbe USB User Manual ie window 2 Click the Open Template a icon in the toolbar and select the 4 Template F desired template from the pop up list The system displays the content Ea of the selected template in the Initial Connections list at the top of the P Frontlinel dialog Frontline 3 Click the OK button to apply the selected template and decoders e Frontline _1 settings and exit the Set Initial Decoder Parameters dialog Fronthne the 3 2 1 2 Adding a New or Saving an Existing Template ne Frontlines Add a Template A template is a collection of parameters required to completely decode communications between multiple devices This procedure adds a template to the system and saves it for later use 1 Click the Save Er button at the top of the Set Initial ig Decoder Parameters dialog to display the Template Manager dialog Name To Save Template As Cancel Frontline4 2 Enter aname for the new template and click OK Cunartip Saved Tamelates For Ths Object Tyee Frontline The syst
59. 00009cd8 ee ia pas Ox0001 Search Attrib Requ ia Handstree Audio Gat FLOW Go 10 054 Slave Ox0001 Search Attrib Resp 00 00 00 C TYPE DH1 10 102 Slave Ox0000 Search Attrib Requ Handstree 00 00 00 4 LT ADDR 1 10 104 Master Ox0000 Search Attrib Resp 00 00 00 C SEON 0 10 134 Slave Ox0000 Search Attrib Requ AudioSink 00 00 00 7 ARON 0 10 135 Master Ox0000 Search Attrib Resp 00 00 00 C _ J lt m Total Frames 28 707 Frames Filtered In 18 Frame s Selected 10 053 1 total For Help Press Fl Figure 4 14 Summary pane right with Tooltip on Column 5 Tran ID Sides in Bluetooth low energy A Bluetooth low energy data connection consists of connection events which are a series of transmissions on the same channel In each connection event the master transmits first then the slave and then the devices take turns until the connection event is finished When the data connection is encrypted and the packets are successfully decrypted the sniffer can determine exactly who sent which packet only non empty encrypted packets empty packets are never encrypted These packets are labeled either M for master or S for slave When the data connection is unencrypted or when encrypted packets are not successfully decrypted by the sniffer the sniffer cannot distinguish the two devices master and slave packets by their content just by the packet timing In those cases we label each devic
60. 11 30 2012 12 20 02 895166 PM 0 00 00 00 631 626 3 Data 0 0 0 0 633 11 30 2012 12 20 02 895166 PM 0 00 00 00 632 627 3 Data oi 0 0 0 634 11 30 2012 12 20 02 895166 PM 0 00 00 00 633 628 3 Data oi 0 0 0 635 11 30 2012 12 20 02 895166 PM 0 00 00 00 634 629 3 Data 98 152 230 10011000 636 11 30 2012 12 20 02 895166PM 0 00 00 00 635 630 3 Data 70 112 160 1110000 p 637 11 30 2012 12 20 02 895166 PM 0 00 00 00 636 631 3 Data 94 148 224 10010100 638 11 30 2012 12 20 02 895166 PM 0 00 00 00 637 632 3 Data 221 34 42 100010 639 11 30 2012 12 20 02 895166 PM 0 00 00 00 638 633 3 Data 211 33 41 100001 640 11 30 2012 12 20 02 895166 PM 0 00 00 00 639 634 3 Data 1c i 28 34 11100 641 11 30 2012 12 20 02 895166 PM 0 00 00 00 640 635 3 Data 80 128 200 10000000 642 11 30 2012 12 20 02 895166 PM 0 00 00 00 641 636 3 Data 80 128 200 10000000 643 11 30 2012 12 20 02 895166 PM 0 00 00 00 642 637 3 Data 80 128 200 10000000 644 11 30 2012 12 20 02 895166 PM 0 00 00 00 643 638 3 Data 80 128 200 10000000 Figure 6 5 Example csv Event Display Export Excel spreadsheet 6 5 2 1 Export Filter Out You can filter out data you don t want or need in your text file This option is available only for serial data In the Filter Out box choose which side to filter out the DTE data the DCE data or neither side don t filter any data For example if you choose the radio button for DTE data the DTE data would be filtered out of your export file and th
61. 4 4 1 11 5 Radix or Hexadecimal Pane The Radix pane displays the logical bytes in the frame in either Ria E 3T JE Ob GA hexadecimal decimal or octal The radix can be changed from ot This k the Radir Pane the Format menu or by right clicking on the pane and i choosing Hexadecimal Decimal or Octal z Copy Selection to Clipboard A Because the Radix pane displays the logical bytes rather than N Select Entire Frame the physical bytes the data in the Radix pane may be different E Change Text Highlight Color from that in the Event pane See Physical vs Logical Byte Display t E i for more information a3 Hexadecimal A Decimal Colors are used to show which protocol layer each byte belongs o to The colors correspond to the layers listed in the Decode E Octal pane The Event Radix Binary Character and Decode panes are all synchronized with one another Clicking on an element in any one of the panes highlights the corresponding element in all the other panes 4 4 1 11 6 Character Pane The Character pane represents the logical bytes in the frame zr La t5 5 5 NE ni in ASCII EBCDIC or Baudot The character set can be A Thi i the Chander Pane changed from the Format menu or by right clicking on the E pane and choosing the appropriate character set c Copy Selection to Clipboard Because the Character pane displays the logical bytes rather E Select Entire Frame than the physical bytes the data in the Character pane may
62. 4 Display Only Characters Display Sides Together meee v Display all Event Information Display numbers in Binary Display numbers in Octal Display numbers in Decimal Display numbers in Hexadecimal Figure 4 3 Data display right click menu If you want to see only the numerical values click on the Numbers Only icon 4 on the Event Display toolbar 4 3 7 3 Switching Between ASCII EBCDIC and Baudot On the Event Display window the analyzer displays data in ASCII by default when you click on the Characters Only icon A There are several ways to change the character set used to display data 1 Gotothe Format menu and select the character set you want A check mark next to the character set indicates which set is currently being used 2 With the data displayed in characters right click on the data panel header label to choose a different character set If you want to see only characters click on the Characters Only icon A on the Event Display toolbar 4 3 7 4 Selecting Mixed Channel Sides If you want to get more data on the Event Display window you can switch to mixed sides mode This mode puts all the data together on the same line Data from one side Slave is shown on a white background and data from the other side Master is shown on a gray background 1 Click once on the Mixed Sides icon Ea to put the display in mixed sides mode 2 Click again to return to side over side mode 3 You can rig
63. 6b be O01 Im Master 4337 mH 4656 c 23 Slave PALS a6 23 6b be 00 00 01 Master 4353 0b 9d 52 q 8 00 02 00 Slave Captured Byte Master 4369 Slave RP 1b b c0 23 Ob 3d Se 00 01 07 17 21 50 Master 4385 Slave do 23 0b Sd 5c 00 01 5a 01 amp FP 34 3 Co Master 4401 37 6a 0 23 Ob 9d Slave Event 4 338 of 4 831 Frame 188 5 3 2011 1 48 58 604388 PM Source ASCII Hex Dec Oct Binary Errors Master 27 393 47 00200111 For Help Press FI Captured Byte Information Figure 4 1 Event Display Click on an event to find out more about it The three status lines at the bottom of the window are updated with information such as the time the event occurred for data bytes the time the byte was captured the value of the byte in hex decimal octal and binary any errors associated with the byte and more Events with errors are shown in red to make them easy to spot When capturing data live the analyzer continually updates the Event Display as data is captured Make sure the Lock icon a is displayed on the toolbar to prevent the display from updating Clicking on the icon again will unlock the display While locked you can review your data run searches determine delta time intervals between bytes and check CRCs To resume updating the display click the Lock icon again You can have more than one Event Display open at a time Click the Duplicate View icon g to create a second independent Event Display window You can loc
64. 7 This is the decimal address of the USB port that connects the device to the computer e End Point Address Range 1 15 This is the decimal address of the operation within the device e USB Carrying Select from the list to apply the USB application 3 2 2 2 USB Missing Decode Information The system usually determines the protocol carried in an USB payload by monitoring previous traffic However when this doesn t happen the Missing Decoding Information Detected dialog appears and requests that the user supply the missing information The following are the most common reasons for a failure to determine the traversal e the capture session started after transmission of the vital information e the analyzer incorrectly received a frame with the traversal information e the communication monitored takes place between two players with implicit information not included in the transmission Whatever the case there are several things to keep in mind 26 Chapter 3 Configuration Settings ComProbe USB User Manual e Either view the USB payload of this frame and other frames with the same address as hex data or assist the analyzer by selecting a protocol using this dialog e You may use the rest of the analyzer without addressing this dialog Additional information gathered during the capture session may help you decide how to respond to the request for decoding information e If you are not sure of the payload carried by the subjec
65. AA oioiis ee ere cee se ae acne noe pare ook ks sae oes oe REES ERA 122 Chapter 7 General Information a 123 7 1 System Settings and Progam Options _ 22 22 o eee eee cece eee cece cece ec nonna 123 PALSY tem NS aga Aa ete aaa abe eden NA basse hebewd bemenisee 123 7 1 1 1 System Settings Disabled Enabled Options _ 2 2 2 22 e eee ee eee eee eee cece ec eeeee 125 7 1 1 2 Advanced System Options a 125 7 1 1 3 Selecting Start Up Options ccs oddone NG Ug nnaki denn sdseucoseuemenkidecheusdacueecesekaen 126 7 1 2 Changing Default File Locations lo cece eee eee eee c cece cece cence eceeceeeeeees 127 aaa AP 129 AA OEE VEERE oe oacesbaceencsaee 130 7 1 4 1 Timestamping Options ee cc eee cc ee ee cee e cee e ecco ne eeeee 130 VI ComProbe USB User Manual 7 1 4 2 Enabling Disabling Timestamp 2 oe ec eee eee cece eee eee 131 7 1 4 3 Changing the Timestamp Resolution 22 c cece cece ee ce cee cece cece ccccecceeeeees 131 7 1 4 4 Switching Between Relative and Absolute Time 02 22 e eee eee eee ee ee eee 132 7 1 4 5 Displaying Fractions of a Second a 133 Za VEC MICAIM LORMAN AA EA 133 7 2 1 Performance Notes 2265c25 decs lt seeceenbeneobesebaredeabicnsdGesececlesntacwadewoeeesoseweaiecesasee 133 7 2 2 BTSnoop File Format 2 22 22 eee cee cc cece cece cece cece cece cece ceceeeeeceeceeeeees 134 UDO MNS NGC
66. AP s nf SEQN 1 ARQN 0 L2CAP Data Connectionless Length 5 CID 0x0002 PS 13 45 10 534608 Setup Setup DM1 LT ADDR 0 LLID L2CAP sfnf SEQN 1 ARON 0 Figure 4 33 Frame and Time Display inside red box If you click on the description of the message interaction the corresponding information is highlighted in Frame Display 10 DO DO OOD 4 7 2004 247 15 137108 Tran ID Initiated by master Original Opcode LMP max slot req 11 OOO0 000 AMANDA 24715145233 ki agos i i ABA na i Wna 49 434 F LMP timing accuracy res P 00010110 00000000 10001100 00110000 00000010 10011001 Tran ID Initiated by slave Drift 50 ppm Jitter 1 NO0111101 00000001 01001110 11111111 11111111 00001111 8 00000000 oooooooo oooooooo oooooooo cOOMEBAH Se P Tran ID Initiated by master LMP features res P16 00 Sc 30 02 99 3d Ol 4e ff ff Of OO OO 00 00 00 O Pee Misini miar har martarl I BIO MZILW Figure 4 34 MSC Synchronization with Frame Display How do navigate in the dialog You can use the navigation arrows at the bottom and the right side of the dialog to move vertically and horizontally You can also click and hold while moving the pointer within dialog that brings up a directional arrow that you can use to move left right and up down Ctrl Summary tab When you select the Ctrl Summary tab you will see a summary of the control and signaling frames in the order that they ar
67. AVOTP Signaling BE Once you select a layer then OK the first error for that layer will be displayed If no error is found a dialog will announce that event FIS4BT AN Error Frame was not Found 4 4 2 4 Message Sequence Chart Printing Cl T There are three standard MSC print buttons Print Preview Print and Cancel Printing pa i 84 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Print Preview 1 When you select Print Preview me the Print Setup dialog appears 2 You next need to select your printer from the drop down list set printer properties and format the print output 3 Then you select OK After you select OK the Message Sequence Chart Print Preview dialog appears SEARRE Pac Jos MAD PIED sev Page 1 of5 LMP M LMP S LMP version req BT version of Master vi arr Tran ID Initiated by master VersNr v1 2 LMP wersion res lt 4 T version of Slave v1 1 Tran ID Initiated by master VersNr vl t ee LMP features req Features reque f Tran ID Initiated by master LMP features res FF eat ures res ponse LMP host connection req Tran ID Initiated by m aster Tran ID lnitiated by master LMP accepted ted by master O riginal O pcode LMP host connection req b LMP setup com plete Tran ID Initiated by slave Figure 4 41 Message Sequence Chart Print Preview The information in the dialog will vary depending on
68. All Layers Cul Summary Non Msg Summary BB LMP L2CAP SDP RFCOMM HF AVDTP AVDTP Signaling Show Framed orly Show Time ordy Show both Frame and Time Had both Frames and Tine Suspend streaming to stream end point 1 Figure 4 39 Return to Text View Using Right Click Menu You can also choose to show e Frame only e Time only e Show both Frame and Time e Hide both Frame and Time 4 4 2 1 Message Sequence Chart Search The Message Sequence Chart has a Search function that makes it easy to find a specific type message within the layers When you select the 1 Search icon AA or 2 use Select layer and message F3 key the Select layer and message dialog appears From this dialog you can search for specific protocol messages or search for the first error frame 82 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data 1 On the MSC dialog select one of the protocol tabs at the top Note If you select All Layers in Step 1 the Protocol Layers drop down list is active If you V4 select any of the other single protocols the Protocol Layers drop down is grayed out 2 Or Open the Search dialog using the Search icon or the F3 key 3 Select a specific Protocol Message from the drop down list Select layer and message Protocol Laver Mang 4 Once you select the Protocol Message click Protocol Message a OK a on Signaling The Search dialog disappears and the first search res
69. B User Manual Click on the Display All Events icon to remove the non data events Click again to display all events See List of all Event Symbols on page 40 for a list of all the special events shown in the analyzer and what they mean 4 3 7 2 Switching Between Hex Decimal Octal or Binary On the Event Display window the analyzer displays data in Hex by default There are several ways to change the radix used to display data Go to the Format menu and select the radix you want A check mark next to the radix indicates which set is currently being used Bookmarks Hexadecimal Decimal Octal Binary ASCI 7 bit ASCI EBCDIC Baudot Figure 4 1 Format Menu 1 Right click on the data display header labels and choose a different radix 5 a Cum FI Cam Tam Cam CU BP n i mi ml m l m Display numbers in Binary ES Display numbers in Octal Od O Display numbers in Decimal b 3 Display numbers in Hexadecimal Figure 4 2 Header labels right click 2 Or right click anywhere in the data display and select a different radix lThe base of a number system Binary is base 2 octal is base 8 decimal is base 10 and hexadecimal is base 16 38 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Oa 9a P 30 Copy the selection and put it on the i24 Save As Go to an Event Number 5e 2f Find 197 Od Display Only Numbers 4
70. Colors from the Options menu to change the colors used The colors for the different layers is displayed 2 Tochange acolor click on the arrow next to each layer and select a new color 3 Select OK to accept the color change and return to Frame Display Select Cancel to discard any selection Select Defaults to return the highlight colors to the default settings Protocol Layer Color Selector Layer 1 Abed Staten ba Layer 3 Abed 7 Ok Layer 2 Abed BURR Layer10 Bae Cancel E a Layer 3 Abc Layer 11 E TH Defaults Layer 4 Abc Laeli BETH Layer 5 hi Layer 13 ae Layer 6 Lewen le Other Layer 7 Abed ff Laws 15 Layer 8 Abed BREE Layer 16 Abed BREE Figure 4 15 Frame Display Protocol Layer Color Selector 4 4 1 13 Filtering Filtering allows the user to control the display which capture frames are displayed Filters fall into two general categories 61 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual 1 Display filters allow a user to look at a subset of captured data without affecting the capture content Frames matching the filter criteria appear in the Frame Display frames not matching the criteria will not appear 2 Connection filters Two options are available a A Bluetooth connection Displays only the frames associated with a Classic Bluetooth link or a Bluetooth low energy access address A new Frame Display will open showing only the protocol
71. Custom Stack 29 30 Customizing Fields in the Summary Pane 57 D D 1 139 D 2 138 D 3 138 D 4 138 148 Appendicies D E 139 Data 36 Data Byte Color Denotation 61 Data Errors 107 Data Rates 36 Decimal 38 Decode Pane 58 decoder 140 Decoder Parameters 22 DecoderScript 140 Decodes 22 29 33 42 48 58 95 Default File Locations 127 Delete a Template 25 Deleting Display Filters 67 Delta Times 36 Direction 67 Directories 127 Disabling 123 Display Entire Buffer 93 Display Filters 62 68 70 Display Options 133 DL 139 Dots 58 Driver 140 Duplicate View 34 36 51 52 E E B 139 E C 139 Easy Protocol Filtering 77 EBCDIC 39 EBCDIC Codes 138 Appendicies EM 138 EQ 139 Errors 107 129 ET 138 Event Display 33 51 120 Event Display Export 120 Event Display Toolbar 34 Event Numbering 137 Event Pane 60 Event Symbols 40 EX 138 Exclude 64 Exclude Radio Buttons 64 Expand All Collapse All 58 Expand Decode Pane 52 Export Export Baudot 122 Export Events 120 Export Filter Out 122 F F F 138 FCSs 36 Field Width 57 File 115 123 File Locations 127 File Series 123 File Types Supported 115 Filtering 76 Filters 62 65 67 70 77 Find 95 98 99 101 102 107 Find Bookmarks 109 149 ComProbe USB User Manual Find Introduction 94 Font Size 41 Frame Display 42 45 48 49 51 52 57 61 Frame Display Change Text Highlight Color 60 Frame Display Find 49
72. HS Bluetooth FHS L2CAP AMP Manager SDP OBEX FTP Non Captured Info LE BB LE PKT LE ADY aah 802 1 Badio 202 11MAC LLE B02 2 SHAE 80211 AMP 80218 LLAP OBEX End Rata V Expand Decode Pane Copy Selection to Clipboard B Frame ASCII Hex Fram Delta Timestamp S Collapse All Nodes 1 63 4 10 2012 3 54 29 68448 Expand All Nodes 2 23 00 00 29 8 4 10 2012 3 54 59 50800 a 23 00 00 00 0 41072012 3 54 59 50800 Connection Filter gt Classic 23 00 00 00 0 4 10 2012 3 54 59 50800 Bluetooth low energy p 23 00 00 00 0 42072012 3 54 59 50800 Set Subsequent Decoder Parameters 802 11 gt 33 00 00 00 7 4 10 2012 3 54 58 80621 33 00 00 00 0 4 10 2012 2 54 52 80690 Hide This Pane 33 00 00 00 0 4 10 2012 2 54 58 80758 33 00 00 00 1 4 10 2012 3 54 58 93496 E i 33 00 00 00 0 4 10 2012 3 54 58 93565 a4 33 nann NAN N ANANN 3 F4A FO QCA Figure 4 28 Unfiltered Capture File with Classic low energy and 802 11 When the Frame Display with the filtered 802 11 data set appears only the Protocol Tabs for 802 11 are present and the tabs for Classic Bluetooth and Bluetooth low energy have been filtered out Frame Display BTAmp80211FTPwLE cfa o EB X File Edit View Format Filter Bookmarks Options Window Help 22 Y S2 m8 DOU MNNSume 5 ae MoeERBCee sd A Summary Data i LE ADV AdvData Field Trunca
73. Info appears when a frame containing an Information field is first seen The tabs disappear when the capture buffer is cleared during live capture or when decoders are reloaded even if one of the tabs is currently selected They subsequently reappear as the corresponding events are detected The tabs disappear when the capture buffer is cleared during live capture or when decoders are reloaded even if one of the tabs is currently selected They subsequently reappear as the corresponding events are detected Use the navigation icons keyboard or mouse to move through the frames The icons and o move you to the first and last frames in the buffer respectively Use the Go To icon Ha to move to a specific frame number Placing the mouse pointer on a summary pane header with truncated text displays a tooltip showing the full header text KJ Frame Display HTC Headset A2DP cfa File Edit View Format Filter Bookmarks Options Window Help a2 H Y7 S2in BO M Sa eB i ies Master Len 36 a mm E 8 O Find A A f Summary SDP Header Length 1 _ Unfiltered Info Configured BT low energy devices Errors Header Version 3 Baseband LMP PreConnection FHS Bluetooth FHS L2CAP O RFCOMM AVDTP AVDTP Signaling WED aaen AVDTP Media Hands Free A2DP Non Captured Info Role Master 0x00 07 62 0f 00 00 1 Channel 29 2431 MHz B Frame Role A Trans ID PDU ID Param L UUID 5vc Handle Delta Clock Dx
74. O If DTR is supposed to be on all the time but you suspect that DTR is being dropped Tell the analyzer to look only at DTR by checking the DTR box and unchecking the others Do a search for where one or more control signals changed from on to off The analyzer would search the DTR signal and stop at the first event where DTR dropped from on to off e Searching for an Exact State To search for an exact state means that the analyzer finds events that match exactly the state of the control signals that you specify O First choose to search for an event where your choices exactly describe the state This changes the normal check boxes to a series of radio buttons labeled On Off and Don t Care for each control signal Choose which state you want each control signal to be in Choose Don t Care to have the analyzer ignore the state of a control signal When you click Find Next the analyzer searches for an event that exactly matches the conditions selected beginning from the currently selected event If the end of the buffer is reached before a match is found the analyzer asks you if you want to continue searching from the beginning If you want to be sure to search the entire buffer place your cursor on the first event in the buffer Select one of the four radio buttons to choose the condition that must be met in the search Select one or more of the checkboxes for Pin 1 2 3 or 4 Or Select one or more of the checkboxes for Reques
75. Print feature uses the current format of the Event Display as specified by the user See About Event Display for an explanation on formatting the Event Display prior to initiating the print feature Configure the Print File Range in the Event Display Print dialog Selecting more than one event in the Event Display window defaults the radio button in the Event Display Print dialog to Selection and allows the user to choose the All radio button When only one event is selected the All radio button in the Event Display Print dialog is selected 118 ComProbe USB User Manual Chapter 6 Saving and Importing Data How to Print Event Display Data to a Browser 1 Select Print or Print Preview from the File menu on the Event Display window to display the Event Display Print dialog Select Print if you just want to print your data to your default printer Select Print Preview if you want preview the print in your browser 2 Select the range of events to include from either All or Selection in the Event Range section Choosing All prints all of the events in the capture file or buffer Choosing Selection prints only the selected events in the Event Display window Note In order to prevent a Print crash you cannot select All if there are more than Si 100 000 events in the capture buffer Note See Configure the Print File Range in the Event Display Print Dialog above for an Si explanation of these selections Event Display Print Eveni ran
76. Probe USB User Manual Chapter 7 General Information 7 2 6 2 Baudot Codes DEC HEX LETTERS FIGURES K NUL LANK LIL 7 oO pan sic 2 um eeel Uu LP a a TAN A ee ae eee SG as a aa LE F GURES FIGURES TONS 39 n1883 53 TE 31 WF TENERS LETTERS 7 2 6 3 EBCDIC Codes hex xO x1 x2 x3 ed os 6 KA xB x xD KE xF Ox NUL S0H STS ETX PF HT L LC DEL SHA NT EE ix DLE OCT OC2 TM RES NL 6s IL CAN EM ec Curfirs iss Rs Us LFS em Soup Jewolaod EL mi j gr LTTE ee rkKi t mi n olela r Ex S tT utviw x yz E Fx O 1 2 3 4 51 6 7 86159 wet W w HHT 7 2 6 4 Communication Control Characters Listed below in alphabetical order are the expanded text meanings for common ANSI communication control characters and two character system abbreviation for each one Some abbreviations have forward slash 138 Chapter 7 General Information ComProbe USB User Manual characters between the two letters This is to differentiate the abbreviations for a control character from a hex number For example the abbreviation for Form Feed is listed as F F to differentiate it from the hex number FF Table 7 4 Communications Control Characters Abbreviation Control Character xt a fa Na 139 ComProbe USB User Manual Chapter
77. Review Mode The Event Display and Frame Display windows can update to display new data during live capture or be frozen to allow data analysis By default the Event Display continually updates with new data and the Frame Display is locked 1 Make sure the Lock icon A is active so the display is locked and unable to scroll 2 Click the Unlock a icon again to resume live update The analyzer continues to capture data in the background while the display is locked Upon resuming live update the display updates with the latest data You can have more than one Event Display or Frame Display window open at a time Click the Duplicate View icon g to open additional Event or Frame Display windows The lock resume function is independent on each window This means that you can have two Event Display windows open simultaneously and one window can be locked while the other continues to update 4 3 7 Data Formats and Symbols 4 3 7 1 Switching Between Viewing All Events and Viewing Data Events By default the analyzer on the Event Display dialog shows all events that include e Data bytes e Start of frame e End of frame characters e Data Captured Was Paused lAn event is anything that happens on the circuit or which affects data capture Data bytes control signal changes and long and short breaks are all events as are I O Settings changes and Data Capture Paused and Resumed _37 Chapter 4 Capturing and Analyzing Data ComProbe US
78. SB USB Setup data and Bluetooth 2 3 Control Window The analyzer displays information in multiple windows with each window presenting a different type of information The Control window opens when the Run button is clicked in the Select Data Capture Method window The Control window provides access to each ComProbe analyzer functions and settings as well as a brief overview of the data in the capture file Each icon on the toolbar represents a different data analysis function A sample Control Window is shown below 10 ComProbe USB User Manual Chapter 2 Getting Started 9 ComProbe Protocol Analysis System USE ComProbe I Sniffer File View Live Options Window Help Go e ocn Hx PREV Ga Configuraten lt Me Device gt Capture fle C Was Pubic Pocuments Frongine Test Equipment My Capture Files Capture 13 05 22 92813 f3 Capture Status Paused Capture to Single Fie lt 1 used Packets on hiw 0 Utilization 0 Host 0 Function For Help Press Fl Packet Decoder O pps 100 Figure 2 9 ComProbe Analyzer Control Window Because the Control window can get lost behind other windows every window has a Home icon a that brings the Control window back to the front Just click on the Home icon to restore the Control window When running the Capture File Viewer the Control window toolbar and menus contain only those selections needed to open a capture file and display the About box Once a capture file is opened the ana
79. Show Only Summary Pane Displays only the Summary pane 46 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Table 4 4 Frame Display Toolbar Icons continued Shall All Panes Except Event Pane Makes the Decode pane taller and the Summary pane narrower Toggle Display Lock Prevents the display from updating BR owtorame First Frame Moves to the first frame in the buffer Previous Frame Moves to the previous frame in the buffer Next Frame Moves to the next frame in the buffer Last Frame Moves to the last frame in a the buffer Find on Frame Display only searches the Find Decode Pane for a value you enter in the text box Find Previous Occurrence Moves to the previous occurrence of the value in the Frame Display Find Find Next Occurrence Moves to the next occurrence of the value in the Frame Display Find Cancel Current Search Stops the current Frame Display Find 47 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual Table 4 4 Frame Display Toolbar Icons continued TO aa Summary Drop Down Box Lists all the protocols found in the data in the file This box does not list all the protocol decoders available to the analyzer merely the protocols found in the data Selecting a protocol from the list changes the Summary Summary pane to display summary information for that protocol When a low energy predefined Named Filter like Nulls
80. When Reload Decoders is clicked the plug ins are reset and received frames are re decoded For example If the first frame occurs more than 10 minutes in the past the 10 minute utilization graph stays blank until a frame from 10 minutes ago or less is decoded Find Search for errors string patterns special events and more Display Capture Notes Brings up the Capture Notes window where you can view or add notes to the capture file Add Modify Bookmark Add a new or modify an existing bookmark Display All Bookmarks Shows all bookmarks and lets you move between bookmarks Signal Display Opens The Signal Display dialog P Breakout Box Opens the Breakout Box dialog Reload Decoders When Reload Decoders is clicked the plug ins are reset and received frames are re decoded For example If the first frame occurs more than 10 minutes in the past the 10 minute utilization graph stays blank until a frame from 10 minutes ago or less is decoded Filter Text giving the filter currently in use If no filter is being used the text reads All Frames which means that Filter nothing is filtered out To see the text of the entire filter place the cursor over the text and a ToolTip pops up with the full text of the filter The following icons all change how the panes are arranged on the Frame Display Additional layouts are listed in the View menu Show Default Panes Returns the panes to their default settings
81. a direction arrow from the direction box The left arrow filters on all frames where the top node address is the destination the right arrow filters on all frames where the top node address is the source and the double arrow filters on all frames where the top node address is either the source or the destination If you want to filter on just one node address skip step 7 and continue with step 8 If you want to filter on traffic going between two address nodes i e a conversation select a node address from the second Address combo box Click OK The Set Condition dialog box closes and the analyzer applies the filter When a display filter is applied a description of the filter appears to the right of the toolbar in the Frame Display windows Pi Note The OK button is unavailable grayed out until the condition selections are complete 4 4 1 13 1 6 The Difference Between Deleting and Hiding Display Filters If you wish to remove a filter from the system permanently then use the Delete procedure However if all you want to do is remove a filter as a means to un clutter the display then use the Hide procedure Deleting a saved filter removes the filter from the current session and all subsequent sessions In order to retrieve a deleted filter the user must recreate it using the Set Conditions dialog Hiding a filter merely removes the filter from the display A hidden filter can be reapplied using the Show Hide procedure
82. a is being captured the window shows you the state of the control signals at the time the window was opened To update the display use the New Snapshot icon pi i 4 6 4 Selecting Signal Display Options To access Signal Display Options Click the Signal Display icon on the Control window toolbar From the Options menu select Signal Display Options To choose which control signals to display in the Signal Display window e Click on a box to check or un check it the control signal name e A check mark next to a control signal name means that the signal is displayed Signal Display Options Display Signal Cancel Help Figure 4 47 USB Signal Display Options 93 Chapter 5 Navigating and Searching the Data The following sections describe how to navigate through the data and how to find specific data or packet conditions of interest to the user 5 1 Find Capturing and decoding data within the ComProbe analyzer produces a wealth of information for analysis This mass of information by itself however is just that a mass of information There has to be ways to manage the information ComProbe software provides a number of different methods for making the data more accessible One of these methods is Find Decode Pattem Time GoTo Special Events Bookmark Seach fee imestan You Day Hou Go to the bmesismp On or before the penhad ime On ot alter the pecihed time Figure 5 1 Find Dialog 94
83. am 129 ComProbe USB User Manual Chapter 7 General Information Side Names Default Namez Current Hames Slave Master Figure 7 6 Example Side Names Where Slave and Master are current 1 To open the Side Names dialog choose Side Names from the Options menu on the Control window 2 Tochange aname click on the name given in the Current Names column and then click again to modify the name a slow double click 3 Select OK to initiate the changes The changes that have been made will not fully take effect for any views already open Closing and reopening the views will cause the name change to take effect 4 Torestore the default values click the Set Defaults button 7 1 4 Timestamping Timestamping is the process of precise recording in time of packet arrival Timestamps is an optional parameter in the Frame Display and Event Display that can assist in troubleshooting a network link 7 1 4 1 Timestamping Options The Timestamping Options window allows you to enable or disable timestamping and change the resolution of the timestamps for both capture and display purposes To open this window Choose Set Timestamp Format from the Options menu on the Frame Display and Event Display window or click on the Timestamping Option ga icon in the Event Display toolbar The Timestamping Options window will open 130 Chapter 7 General Information ComProbe USB User Manual Timestamping
84. an e F3 is a shortcut for Find Next Occurrence e You cannot search while data is being captured e After acapture is completed you cannot search until Frame Display has finished decoding the frames e Find is not case sensitive e The status of the search is displayed at the bottom of the dialog Total Frames 259 Frames Filtered In 259 Frame s Selected 201 1 e The search occurs only on the Search for Antenna True results FPound protocol layer selected e Tosearch across all the protocols on the Frame Display select the Unfiltered tab e A drop down list displays the search values entered during the current session of Frame Display Antenna True e The search is cancelled when you select a different protocol tab during a search e You can cancel the search at any time by selecting the Cancel Current Search button 4 4 1 7 Synchronizing the Event and Frame Displays The Frame Display is synchronized with the Event Display Click on a frame in the Frame Display and the corresponding bytes is highlighted in the Event Display Each Frame Display has its own Event Display As an example here s what happens if the following sequence of events occurs 1 Click on the Frame Display icon E in Control window toolbar to open the Frame Display 2 Click on the Duplicate View icon dg to create Frame Display 2 3 Click on Event Display icon Po in Frame D
85. an highlight a range by clicking and dragging the mouse to the right or left You can also use the arrow keys to move the cursor to the right or left The Signal Display window is synchronized with other windows in the analyzer A range highlighted in the Signal Display window is also highlighted in the Event Display and Frame Display windows The Snap to Nearest Change icon lets you place the cursor on the signal change you want to look at without needing to click on exactly the right spot Find the line corresponding to the control signal you want to look at Click on the line and the analyzer moves the cursor to the nearest change If you highlight a range the analyzer snaps to the nearest changes on either side This feature is active when the Snap To button is pressed and inactive when the button is not pressed Use the Zoom In and Zoom Out buttons to increase and decrease the magnification of the window The analyzer changes the magnification by a factor of 2 4 or 8 depending on the option selected in the Signals menu If you want to see a range in greater detail highlight the range you want to view and click on the Zoom to Selection icon D The analyzer zooms in to show only that range in the window If the range is small the analyzer may add additional events to fill up the window To view the entire snapshot in the window click on the Display Entire Buffer icon SQ Note that if you bring up the Signal Display window while dat
86. and Polls is selected the Summary drop down is disabled Summary Non Captured Info na Text with Protocol Stack To the right of the Summary Layer box is some text giving the protocol stack currently in use Summary Non Captured Info Baseband with Auto traverse in the buffer is the sorted order Therefore the last frame in the buffer may not have the last frame J Note If the frames are sorted in other than ascending frame number order the order of the frames number 4 4 1 2 Frame Display Status Bar The Frame Display Status bar appears at the bottom of the Frame Display It contains the following information e Frame s Selected Displays the frame number or numbers of selected highlighted frames and the total number of selected frames in parentheses e Total Frames The total number of frames in the capture buffer or capture file in real time e Frames Filtered In The total number of frames displayed in the filtered results from user applied filters in real time 4 4 1 3 Hiding and Revealing Protocol Layers in the Frame Display Hiding protocol layers refers to the ability to prevent a layer from being displayed on the Decode pane Hidden layers remain hidden for every frame where the layer is present and can be revealed again at any time You can hide as many layers as you wish Note Hiding from the Frame Display affects only the data shown in the Frame Display and not any information in any other window
87. ar in the Summary Pane when certain conditions are met These tabs appear only in the General group and apply to all technologies The tabs are e Bookmarks appear when a bookmark is first seen e Errors appear when an error is first seen An error is a physical error in a data byte or an error in the protocol decode e Info appears when a frame containing an Information field is first seen The tabs disappear when the capture buffer is cleared during live capture or when decoders are reloaded even if one of the tabs is currently selected They subsequently reappear as the corresponding events are detected Comparing Frames If you need to compare frames you can open additional Frame Display windows by clicking on the Duplicate View icon ag You can have as many Frame Display windows open at a time as you wish Frame Wrapping and Display In order to assure that the data you are seeing in Frame Display are current the following messages appear describing the state of the data as it is being captured e All Frame Display panes except the Summary pane display No frame selected when the selected frame is in the buffer i e not wrapped out but not accessible in the Summary pane This can happen when a tab is selected that doesn t filter in the selected frame e When the selected frame wraps out regardless of whether it was accessible in the Summary pane all Frame Display panes except the Summary pane display Frame wrapped out of buffe
88. arches the file and finds the point at which framing errors stopped occurring Searching for an event where the error conditions changed means that the analyzer searches the data and stop at every point where the error condition changed from on to off or off to on For example if you have data where sometimes the framing is wrong and sometimes right you would choose to search framing errors where the error condition changed This first takes you to the point where the framing errors stopped occurring When you click Find Next the analyzer stops at the point when the errors began occurring again Clicking Find Previous will search backwards from the current postion The analyzer takes the current selected byte as its initial condition when running searches that rely on finding events where error conditions changed The analyzer searches until it finds an event where error conditions changed or it reaches the end of the buffer at which point the analyzer tells you that there are no more events found in the buffer If you are searching for an exact match the analyzer asks you if you want to continue searching from the beginning of the buffer Searching for Exact Error Conditions 108 ComProbe USB User Manual Chapter 5 Navigating and Searching the Data To search for an exact state means that the analyzer finds events that exactly match the error conditions that you specify kb Find BPA500 cfa
89. ata but in writing the timestamp to the file Try turning off timestamping from the Timestamping Options window e For Driver Buffer Overflows change the size of the driver buffer This value is changed from the Advanced System Settings Go to the Control window and choose System Settings from the Options menu Click on the Advanced button Find the value Driver Receive Buffer Size in Operating System Pages Take the number listed there and double it e The analyzer s number one priority is capturing data updating windows is secondary However updating windows still takes a certain amount of processor time and may cause the analyzer to lose data while the window is being updated Some windows require more processing time than others because the information being displayed in them is constantly changing Refrain from displaying data live in the Event Display and Frame Display windows The analyzer can capture data with no windows other than the Control window open e If you are still experiencing buffer overflows after trying all of the above options then you need to use a faster PC 4 6 Viewing Historical Signal Changes 4 6 1 Signal Display Window The Signal Display window provides a graphical view of control signal transitions that you can manipulate You can zoom in to view the state of control signals for a range of events or zoom out to view control signal changes over the course of an entire capture session To open this window cli
90. ay Print Preview Provide information to export data trom the currently selected filter tab Include Detail Section 3 Summary C Mo decode section Data Bytes CJ All layers Selected layers only Frame Range SIM Application All SIP Selection oME SMTP Chiat FE W Delete File ResetThe Selected Layer Note Browser print options may affect whether any gray background is printed See Help for info OK Cancel Help Figure 6 2 Frame Display Print Preview Dialog 2 From this point the procedure is the same as steps 2 through 5 in How to Print Frame Display Data above 3 Click the OK button and after a brief wait a browser window will appear 6 4 2 Printing from the Event Display The Event Display Print feature provides the user with the option to print either the entire capture buffer or the current selection When Print Preview is selected the output displays in a browser print preview window where the user can select from the standard print options The output file format is in html and uses the Microsoft Web Browser Control print options for background colors and images see below Print Background Colors Using Internet Explorer 1 Open the Tools menu on the browser menu bar 2 Select Internet Options menu entry 3 Click Advanced tab 4 Check Print background colors and images under the Printing section 5 Click the Apply button then click OK The Event Display
91. cccccececeudeuntuetcendndalecacenesenaseseGusiedsesieudeknstecesolioke 42 4 4 1 1 Frame Display Toolbar 22 22 a 45 AAA Frame Display Status Baf euch oon cee ss ecto seedncceeanasorcetonsscreneaes eva NAAT NOD i 48 4 4 1 3 Hiding and Revealing Protocol Layers in the Frame Display 22 eeeeeeee 48 4 4 1 4 Physical vs Logical Byte Display _ 2 0 022 o ele cece cece eee e cece e cece eee eeeeeeeeee 49 a a BG AA 49 4 4 1 6 Frame Display Find 202 e cece cece eee cece eceeeeeeeceeees 49 4 4 1 7 Synchronizing the Event and Frame Displays 22 eee eee cece cee eee ceccecceeeeees 51 4 4 1 8 Working with Multiple Frame Displays 22 2222 e cece ee eee ee cee cece eee eeeeees 52 4 4 1 9 Working with Panes on Frame Display 2 22 2 cece eee cece cece cc ec ceeceeeceeeeeees 52 4 4 1 10 Frame Display Byte Export eeceec eee cece cece cece eeeeeeeee 52 4 4 1 11 Panes in the Frame Display 22 leo c ee cee cece cee eeceeeeeeeeeees 54 AALL S0mMmMmay AA 54 4 4 1 11 2 Customizing Fields in the Summary Pane a 57 4 4 1 11 3 Frame Symbols in the Summary Pane 22 22 e eee ee eee e cece e ee eeeee 58 4 4 1 11 4 Decode Pane an AA AA a tn na 58 4 4 1 11 5 Radix or Hexadecimal Pane ieee ce ee ee ee ee ee ee eee eee 59 4 4 1 11 6 Character Pane Xa katanda kah AE SYA ventadstsalbetieeseerenseelewshss 4 ecav
92. changes You can also right click on the frame to select the same option 23 ComProbe USB User Manual Chapter 3 Configuration Settings Options Window Help Directories ww Check for New Releases at Startup Side Names Protocol Stack Set Initial Decoder Parameters Set Subsequent Decoder Parameters Automatically Request Missing Decoding Information Figure 3 3 Set Subsequent Decoder Parameters from Control window mo His GOQ Tm LAB Unfiltered Info Configured BT low energy devices Errors l Baseband LHF PreConnection FH5 Bluetooth FHS L2CAP SDP UELLE B Frame Role Addr OLCI Channel Frame Type PYF Bit Cmd CmdType K0 Masher 1 Ox00 0 SABEM 1 o Al Slave 1 0x00 LA 1 ae Master 1 0x00 o UIH o Com Param Nag K3 Slave 1 0x00 a UIH O Fes Param Neg Set Subsequent Decoder Parameters 52 RFCOMM Rules in effect from frame 57 onward until redefined here for a later frame On the Slave side with Server Channel 13 RFCOMM is carying Hands Free Ovemdden by user Change the Selected Item to Cary Hands Free bd Fenovi Figure 3 4 Example Set Subsequent Decode for Frame 52 RFCOMM e Each entry in the Set Subsequent Decoder Parameters dialog takes effect from the specified frame onward or until redefined in this dialog on a later frame e The Remove Override button will remove the selected decode parameter override e The Remove All button
93. changes to a split double arrow then click and drag the cursor to the right 4 The Frame Size Timestamp and Delta columns can be hidden by right clicking on the header and selecting Show Frame Size Column Show Timestamp Column or Show Delta Column Follow the same procedure to display the columns again Moving Columns Changing Column Order To move acolumn 57 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual 3 4 Click and hold on the column header Drag the mouse over the header row A small white triangle indicates where the column is moved to When the triangle is in the desired location release the mouse Restoring Default Column Settings To restore columns to their default locations their default widths and show any hidden columns 1 Right click on any column header and choose Restore Default Column Widths or select Restore Default Column Widths from the Format menu 4 4 1 11 3 Frame Symbols in the Summary Pane Agreen dot means the frame was decoded successfully and the protocol listed in the Summary Layer drop down box exists in the frame No dot means the frame was decoded successfully but the protocol listed in the Summary Layer drop down box does not exist in the frame Agreen circle means the frame was not fully decoded There are several reasons why this might happen e One reason is that the frame compiler hasn t caught up to that frame yet It takes some time for
94. cial case involving Ring Indicator and computers with 8250 UARTs or UARTs from that family where the state of RI may not be captured accurately Normally when a control signal changes state from high to low or low to high an interrupt is generated by the UART and the analyzer goes to see what has changed and record it Ring Indicator works a little differently An interrupt is generated when RI changes from high to low but not when RI changes from low to high If Ring Indicator changes from low to high the analyzer does not know that RI has changed state until another event occurs that generates an interrupt This is simply the way the UART works and is not a deficiency in the analyzer software To minimize the chance of missing a Ring Indicator change the analyzer polls the UART every millisecond to see if RI has changed It is still possible for the analyzer to miss a Ring Indicator change if RI and only RI changes state more than once per millisecond UARTs in the 8250 family include 8250s 16450s 16550s and 16550 variants If you have any questions about the behavior of your UART and Ring Indicator please contact technical support 4 5 2 Reading the Breakout Box Window The Breakout Box display is divided into three main parts The first part to the far left of the screen shows the abbreviated name of the control signal being monitored These names can be changed in the I O Settings window by selecting Names from the Options menu The se
95. ck the Signal Display icon on the Control window toolbar or choose Signal Display from the Window menu The Signal Display window does not provide a real time view of control signal changes It is intended to be used as a post process review screen Use the Breakout Box window to view real time control signal changes Note that if you bring up the Signal Display window while data is being captured the window shows you the state of the control signals at the time the window was opened This is called a snapshot because it is a picture of the buffer at the time the Signal Display was opened To update the display to reflect the current state of the buffer use the New Snapshot icon pi When you open Signal Display you will see a set of codes For USB ComProbe Il USB you will see Pin Codes 1 2 3 and 4 These correspond to the four Digital Input Enabling Options explained in USB I O Settings For all High Speed Serial Sniffing options you will see six control signals These include e RTS Request to Send DCE Signal e CTS Clear to Send e DSR Data Set Ready e DTR Data Terminal Ready 90 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data e CD Carrier Data e RI Ring Indicator 2 Signal Display USB Mass Storage and MTP Decode Exa El KO Edit View Signals Options Window Help Pin 4 I Current snapshot 1 to 573 429 573 429 Events Delta N A Currently visible 1 379 to 1 615 237 Events
96. cond part shows the control signal counters The counters show how many times each control signal has changed state This is useful in situations when signals may be changing state too rapidly to be displayed graphically The third part of the Breakout Box shows the current states of the control signals The indicators show the state that the control signal is currently in and the line graph displays the state of the signal over time A single line means that the signal is logically off while a double line means that the signal is logically on A half height tick means that a signal has gone through one full transition from off to on to off or vice versa since the analyzer last updated the screen To change the indicators or change the rate at which the analyzer updates the window click on the Options icon 4 5 3 The Breakout Box Toolbar Table 4 6 Breakout Box Toolbar Icons Description Description g Home brings the Control window to the front Reset resets the Breakout Box window Lock Locks the display Clicking on the Lock icon unlocks the window 88 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Table 4 6 Breakout Box Toolbar Icons continued ee eee eee Unlock In the Unlock state the screen fills in the data captured since the screen lock and moves down to display incoming data again Clicking on the Unlock icon locks the window Options Brings up the Breakout Box Options window
97. ctoseconds high resolution mi timestamping resolutions Note 1 To apply resolution changes you must restart the program 1 Goto the Capture Options section of the window Note 2 Finer resolutions increase the capture file size 2 Change the resolution listed in the Storage Resolution box 131 ComProbe USB User Manual Chapter 7 General Information Note If you change the resolution you need to exit the analyzer and restart in order for the H change to take effect 7 1 4 3 1 Performance Issues with High Resolution Timestamp There are two things to be aware of when using high resolution timestamps The first is that high resolution timestamps take up more space in the capture file because more bits are required to store the timestamp Also more timestamps need to be stored than at normal resolutions The second issue is that using high resolution timestamping may affect performance on slower machines For example if 10 bytes of data are captured in 10 milliseconds at a rate of 1 byte per millisecond and the timestamp resolution is 10 milliseconds then only one timestamp needs to be stored for the 10 bytes of data If the resolution is 1 millisecond then 10 timestamps need to be stored one for each byte of data If you have two capture files both of the same size but one was captured using normal resolution timestamping and the other using high resolution the normal resolution file has more data events in it because
98. ctronic sticky notes that you attach to frames of interest so they can be easily found later In Frame Display bookmarked frames appear with a magenta triangle icon next to them 5 Frame Command Eno Code FID MIC AiD Source TID LID Fra Deka Timestane A 1 Ed 12 6 2010 11 25 2 168 DOO 12 67200 11 25 b E3 124 0000 00 3 LAND 17250 a Ed 00 00 00 1 12 6 2010 11 25 Figure 5 13 Bookmarked Frame 3 in the Frame Display 00 ag 00 o0 g Inthe Event Display bookmarks appear as a dashed line around the start of frame 1 M 0G 15 marker D0 4500 00 47 lt Bookmarks are easy to create and maintain and are a very valuable tool for data analysis When you create or modify a bookmark you have up to 84 characters to explain a problem leave yourself a reminder leave someone else a reminder etc Once you create a bookmark it will be saved with the rest of the data in the cfa file When you open a cfa file the bookmarks are available to you Once you have created a bookmark you can use the Find function or other navigation methods to locate and move among them 5 2 1 Adding Modifying or Deleting a Bookmark You can add modify or delete a bookmarks from Frame Display and Event Display Add 1 Select the frame or event you want to bookmark 2 There are three ways to access the Add Bookmark dialog a Select Add or Modify Bookmark from the Bookmarks menu on the Frame Display and Event Display b Select the
99. d contacting technical support before changing any of these parameters To access the Advanced System Options 1 Go to the Control A window 2 Choose System Settings from the Options menu 3 On the System Settings window click the Advanced button 2125 ComProbe USB User Manual Chapter 7 General Information Advanced System Options warmy Be catebul when changing Ihese paameler Please read the onde help Met or contact Technical Support Selechons do not take effect unti FTS and ary datasources are Hated Diver Recent Buie Size in Ebates Dine Schon Queue See m Operating Suslem Pages Fiame Complebon Timea m Seconds Figure 7 2 Advanced System Options dialog e Driver Receive Buffer Size in Kbytes This is the size of the buffer used by the driver to store incoming data This value is expressed in Kbytes e Driver Action Queue Size In Operating System Pages This is the size of the buffer used by the driver to store data to be transmitted This value is expressed in operating system pages e Frame Completion Timeout in Seconds This is the number of seconds that the analyzer waits to receive data on a side while in the midst of receiving a frame on that side If no data comesin on that side for longer than the specified number of seconds an aborted frame event is added to the Event Display and the analyzer resumes decoding incoming data This can occur when capturing interwoven data DTE and DCE and one
100. e 5 11 Find Error tab Searching for event where The first three options are all fairly similar and are described together These options are searching for an event where e one or more error conditions changed e one or more error conditions occurred e one or more error conditions were off i e no errors occurred Selecting Which Errors to Search The section with the check boxes allows you to choose which errors the analyzer should look for Click on a box to check or un check it 107 Chapter 5 Navigating and Searching the Data ComProbe USB User Manual If you want to search only for overrun errors e check the box if shown e un check the other boxes To search for all types of errors e check all boxes The most common search is looking for a few scattered errors in otherwise clean data To do this type of search e choose to Search for an event where one or more error conditions occurred e choose which errors to look for e By default the analyzer looks for all types of errors In contrast searching for an event where one or more error conditions were off means that the analyzer looks for an event where the errors were not present For example if you have data that is full of framing errors and you know that somewhere in your 20 megabyte capture file the framing got straightened out you could choose to search for an event where one or more error conditions were off and choose to search only for framing The analyzer se
101. e Display window defaults the radio button in the Frame Display Print dialog to Selection and allows the user to choose the All radio button When only one frame is selected the All radio button in the Frame Display Print dialog is selected How to Print Frame Display Data 1 Select Print or Print Preview from the File menu on the Frame Display window to display the Frame Display Print dialog Select Print if you just want to print your data to your default printer Select Print Preview if you want access to printer options 2 Choose to include the Summary pane check the box in the print output The Summary pane appears at the beginning of the printed output in tabular format If you select All layers in the Detail Section the Data Bytes option becomes available 116 ComProbe USB User Manual Chapter 6 Saving and Importing Data 3 Inthe Detail Section choose to exclude No decode section the decode from the Detail pane in the Frame Display or include All Layers or Selected Layers Only If you choose to include selected layers then select click on and highlight the layers from the list box 4 Click on selected layers in the list to de select or click the Reset Selected Layers button to de select all selected layers Frame Display Print Provide imfomaton to expat dala rom the cunnently selected fiber tab Ircid Detal Section 7 Summary E No decode tection C Al layers O Selected layers ond 02 71 AMP HUETO STF
102. e Identification Pattern consists of the 8 hexadecimal octets 62 74 73 6E 6F 6F 70 00 This is the ASCII string btsnoop followed by one null octets Version Number A 32 bit 4 octet unsigned integer value representing the version of the packet capture file being used This document describes version number 1 134 Chapter 7 General Information ComProbe USB User Manual Datalink Type A 32 bit 4 octet field identifying the type of datalink header used in the packet records that follow The datalink type codes are listed in the table below Values O 1000 are reserved to maximize compatibility with the RFC1761 snoop version 2 format Table 7 2 Datalink Codes Datalink Type Reserved 0 1000 Un encapsulated HCI H1 1001 HCI UART H4 1002 HCI BSCP 1003 HCI Serial H5 1004 Unassigned 1005 4294967295 Packet Record Format Each packet record holds a partial or complete copy of one packet as well as some descriptive information about that packet The packet may be truncated in order to limit the amount of data to be stored in the packet file Each packet record holds 24 octets of descriptive information about the packet followed by the packet data which is variable length and an optional pad field The descriptive information is structured as six 32 bit 4 octet integer values The structure of the packet record is as follows Original Length Included Length Packet Flags Cumulative D
103. e as side 1 or 2 not as master or slave In each connection event packets sent by the device which transmitted first in the connection event are labeled 1 and packets sent by the device which transmitted second are labeled 2 If no packets in the connection event are missed by the sniffer the device labeled 1 is the master and the device labeled 2 is the slave However if we do not capture the very first packet in a connection event i e the packet sent by the master but do capture the packet sent by the slave we label the slave as side 1 since it is the first device we heard in the connection event Because there is potential clock drift since the last connection event 56 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data we cannot use the absolute timing to correct this error there would still be cases where we get it wrong Therefore we always assign 1 to the first packet in a connection event So even though it is rare there are connection events where packets sent by the slave device are labeled 1 and packets sent by the master are labeled 2 Finally in a noisy environment it is also possible that the sniffer does not capture packets in the middle of a connection event If this occurs and the sniffer cannot determine the side for the remaining packets in that connection event the side is labeled U for unknown 4 4 1 11 2 Customizing Fields in
104. e ce ec cece cece e cece e cece ee eeeeeeeeceeeeeees 94 Figure 5 2 Find Decode Tab Search for String 2 22 e cece cece cece eee c cece ccc ececeeceeceeeeeeees 95 Figure 5 3 Find Decode Tab Side Restriction _ 22 2 lee eee eee c eee e eee cece aana 96 Figure 5 4 Find Pattern Tab 22 22 l eee cece cee cee cee cece cece cece eee eens ceeceeceeeceeeeeeee 98 Figure 5 5 Find Pattern Tab Side Restrictions c eee cece cece cece eee eee eeeeeeeeee 98 Figure 5 6 Find by Time tab ieee ec cc ccc cee cee ec eee cece cece eee eceeceeeeeceseeeeees 99 Figure 5 7 Find Go To tab _ _ 22 22 2 ee eee aaao a202 a222 eee cence eee eeeeeeeeeeeees 101 Figure 5 8 Find Special Events tab _ 2 22 oie a 103 Figure 5 9 Find SIENal taD 3 n an becuse sete DL eee dae LED NS Ka teeta cecee DDUZSL LADLAFENADLE GT SALAT DLL LAGA 104 IX ComProbe USB User Manual Figure 5 10 Find Signal Tab _ 2 222 onc cee eee Laaa aaan aaan aana 105 Figure 5 21 BING EVrOr taD coerce aa NAA tbcberebe dad LAGE UNA udu baudaeereewccecwseuecieeeSevecuseteances 107 Figure 5 12 Find Bookmark tab _ 22 22 eee ee ccc eee eee e eee eee eee eeeeeeeeeeeee 110 Figure 5 13 Bookmarked Frame 3 in the Frame Display 2 a 111 Figure 5 14 Find Window Bookmark tab Used to Move Around With Bookmarks 113 Figure 6 1 Frame Display Print Dialog _
105. e file would contain only the DCE data You can also filter out Special Events which is everything that is not a data byte such as control signal changes and Set I O events Non printable characters or both If you choose to filter out Special Events your export file would contain only the data bytes Filtering out the non printable characters means that your export file would contain only special events and data bytes classified as printable In ASCII printable characters are those with hex values between 20 and S7e 6 5 2 2 Exporting Baudot When exporting Baudot you need to be able to determine the state of the shift character In a text export the state of the shift bit can be determined by the data in the Character field When letters is active the character field shows letters and vice versa 122 Chapter 7 General Information 7 1 System Settings and Progam Options 7 1 1 System Settings Open the System Settings window by choosing System Settings from the Options menu on the Control window To enable a setting click in the box next to the setting to place a checkmark in the box To disable a setting click in the box to remove the checkmark When viewing a capture file settings related to data capture are grayed out 1235 gt ComProbe USB User Manual Chapter 7 General Information Single File System Settings xe Capture Mode Single File i Restart Capturing After Saving or Clearing Capture File W
106. e multiple Frame Display windows open and you are capturing data you may receive an error message declaring that Filtering cannot be done while receiving data this fast If this occurs you may have to stop filtering until the data is captured 4 4 1 9 Working with Panes on Frame Display When the Frame Display first opens all panes are displayed except the Event pane To view all the panes select Show All Panes from the View menu e The Toggle Expand Decode Pane icon iE makes the decode pane longer to view lengthy decodes better e The Show Default Panes icon i returns the Frame Display to its default settings e The Show only Summary Pane icon gE displays on the Summary Pane To close a pane right click on the pane and select Hide This Pane from the pop up menu or de select Show Pane Name from the View menu To open a pane right click on the any pane and select Show Hidden Panes from the pop up menu and select the pane from the fly out menu or select Show Pane Name from the View menu To re size a pane place the cursor over the pane border until a double arrow cursor appears Click and drag on the pane border to re size the pane 4 4 1 10 Frame Display Byte Export The captured frames can be exported as raw bytes to a text file ye ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data 1 From the Frame Display File menu select Byte Export J Frame Display le modified channel maps HID_
107. e parameters later min AY Chapter 3 Configuration Settings ComProbe USB User Manual e Choose Set Initial Decoder Parameters from the Options menu on the Control and Frame Display windows Options Window Help Hardware Settings VO Settings System Settings Alt Enter Directories Check for New Releases at Startup Side Names Protocol Stack Set Initial Decoder Parameters Set Subsequent Decoder Parameters Automatically Request Missing Decoding Information Figure 3 1 Select Set Initial Decoder Parameters from Control window The Set Initial Decoder Parameters window opens with a tab for each decoder that requires parameters Set Initial Decoder Parameters Template AVDTP Securty Lacap RFCOMM a2DP use Px Tce UDP Figure 3 2 Tabs for each decoder requiring parameters e Each entry in the Set Initial Decoder Parameters window takes effect from the beginning of the capture onward or until redefined in the Set Subsequent Decoder Parameters dialog Override Existing Parameters The Set Subsequent Decoder Parameters dialog allows the user to override an existing parameter at any frame in the capture where the parameter is used If you have a parameter in effect and wish to change that parameter e Select the frame where the change should take effect e Select Set Subsequent Decoder Parameters from the Options menu and make the needed
108. e received transmitted from and to devices 80 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data mmm OS NG TE COST EP AA OR Ee ee An r PE All Layers Cii Summary NonMeg Summary BB LMP pE2CAPI SOP PRFCOMMEHE PAVOTPJAVDTP Signaling LESES eat recon er ao BU SAW Figure 4 35 Control and Signaling Frames Summay The frame numbered is shown whether the message comes from the Master or Slave the message Address the message itself and the timestamp Additionally the control signaling packets for each layer are shown in a different background color Piconet Piconet2 00 All Layers Ciri Summary Non Msg Summary BB LMP L2CAP SDP RFCOMM OBEX BIP Figure 4 36 Packet Layers Shown in Different Colors If you right click within the Ctrl Summary you can select Show in MSC FIFCOMM HF aka z e ee a e _ J All Layers Ctrl Summary Nonksg Summary BB LMP L2CAP SDP AVDTP AVDTP Signaling 4 Figure 4 37 Right Click in Ctrl Summary to Display Show in MSC The window then displays the same information but in the normal MSC view 81 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual AllLayers Ctrl Summary Non Msg Summary BB LMP L2CAP SDP RFCOMM HF AVDTP AVDTP Signaling a Figure 4 38 MSC View of Selected Packet from Ctrl Summary You can return to the text version by using a right click and selecting Show in Text
109. e to remove the selected bookmark 2 Click on Modify to change the selected Bookmark name 3 Remove All will delete all bookmarks in the window The Find window Bookmark tab will also appear when using functions other than Find such as when clicking on ro the Display All Bookmarks icon 5 1 9 Changing Where the Search Lands When doing a search in the analyzer the byte or bytes matching the search criteria are highlighted in the Event Display The first selected byte appears on the third line of the display CVEventDisplay To change the line on which the first selected byte appears Selectlion0Offset 2 1 Open fts ini located in the C User Public Public Documents Frontline Test Equipment 2 Go to the CVEventDisplay section 3 Change the value for SelectionOffset 4 If you want the selection to land on the top line of the display change the SelectionOffset to O zero 110 ComProbe USB User Manual Chapter 5 Navigating and Searching the Data 5 1 10 Subtleties of Timestamp Searching Timestamping can be turned on and off while data is being captured As a result the capture buffer may have some data with a timestamp and some data without When doing a search by timestamp the analyzer ignores all data without a timestamp Note The raw timestamp value is the number of 100 nanosecond intervals since the beginning of H January 1 1601 This is standard Windows time 5 2 Bookmarks Bookmarks are ele
110. eateses 59 441117 Binary Pang aa a aa aa baa NG a a ana aaa pag TnT ab ea S a eE 60 Cd EV OCPI a NALANG NA a NOE AAO NADAAN GAAN ANA DAA 60 4 4 1 11 9 Change Text Highlight Color cece cece cece eee cece eeceeeeee 60 4 4 1 12 Protocol Layer Colors 22 220 cece ccc cee cee ccc cece eee cece ec eeceeceeceeeceeees 61 4 4 1 12 1 Data Byte Color Notation c ec eee cece eee eee cece eeeee 61 4 4 1 12 2 Changing Protocol Layer Colors 22 2 cece cece cece ccc cece cee eecececceeeeeeee 61 AA AA FENG ANGAT eee sees alee pA DE ate deem eeneueeqenbeees 61 4 4 1 13 1 Display Filters aa 62 4 4 1 13 1 5 Defining Node and Conversation Filters 222 eee eee eee ee eee cece eee 67 4 4 1 13 1 6 The Difference Between Deleting and Hiding Display Filters 2 67 44 11317 oT Al AA PP eae Oe 69 iV ComProbe USB User Manual 4 4 1 13 2 Connection Filtering 22 2 naana aaa aoaaa aaa aaa aLaaa Laaa aaa aaa aoaaa anaa 71 4 4 1 13 2 1 Creating a Connection Filter 22 ele eee cece cece cece eceeeeceeceeees 71 4 4 1 13 2 2 Connection Filter Display _ 2 2 222 eee ee ee cece cece eee cece ee eeeeeeee 74 4 4 1 13 3 Protocol Filtering from the Frame Display 22 e eee ee eee eee e cece ee eeee 76 4 4 1 13 3 1 Quick Filtering on a Protocol Layer l ele eee eee c eee eens 76 4 4 1 13 3 2 Easy Protocol Filterin
111. ect a device to sniff scan To access the Hardware Settings dialog 1 Select Hardware Settings from the Options menu on the Control window Hardware Settings Figure 3 1 USB Hardware Settings Dialog 2 Select a device from the Available Sniffers drop down list 3 Select OK If no devices are found the list will be blank You can also select Refresh List to make sure the list is complete 3 1 2 USB I O Settings The IO Settings dialog is used to configure a device The USB ComProbe filters out a number of packet types by default The top of the dialog displays the Firmware and Hardware versions 17 ComProbe USB User Manual Chapter 3 Configuration Settings iO Settings Haidrare riigimaa Farmasia Ve 1 1 Hardware Version v1 0 Hardware Filtering Options E SOF Poding IN packets NACK IN NAK PING NAK PRE Poling SPLIT groupe CAE bus activities Chip JK pass Keep alives C Packets matching analyzer s device addres Enable all Fiters Digis Input Enabling Ophons C Lire 1 Brown L Line 2 Pink _ Lins 3 Orange Line 4 rai Digital Output Conhgursbon Figure 3 2 Hardware Input Filter These options enable the analyzer hardware to discard some common packet groups to reduce the amount of capture data received Some of these packet groups correspond to polling operations and so these sequences do not contain any actual data transfer If there is a change in the digital
112. ed Quick Filter The box in the center is the Protocols To Hide When you select the checkbox for a protocol in the Protocols To Hide data for that protocol will not appear in the Decode Binary Radix and Character panes The frames containing that type data will still appear in the Summary pane but not in the Decode Binary Radix and Character panes The box on the right is the Named Filters It contains filters that you create using the Named Filter and Set Condition dialogs When you select the checkbox for the Name Filters a tab appears on the Summary Pane that Mamed Filters Filter displays the frame containing the specific data identified in the filter The gt Filter named Filter tab remains on the Frame Display Summary Filter Pane unless you hide it using the Hide Show Display Filters filters ASCO link Supported dialog Check the small box next to the name of each protocol you want to filter in Pole Slave hide or Named Filter to display Configured BT low energy devic Exclude NULL and POLLs Then click OK 4 4 1 13 3 2 Easy Protocol Filtering There are two types of easy protocol filtering The first method lets you filter on the protocol shown in the Summary pane and the second lets you filter on any protocol discovered on the network so far 4 4 2 About The Message Sequence Chart MSC The Message Sequence Chart MSC displays information about the messages passed betwee
113. ed Condition Name This Condition a User Detined Conditions FilterQ Hep elp Figure 4 19 Save Named Filter Condition Dialog The Set Condition dialog box closes creates a tab on the Frame Display with the filter name and applies the filter When a display filter is applied a description of the filter Filter Include each frame where the protocol Daka exists appears to the right of the toolbar in the Frame Display windows Note The OK button on the Set Condition dialog box is unavailable grayed out until the VA condition selections are complete 66 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data 4 4 1 13 1 5 Defining Node and Conversation Filters There are two steps to using Node and Conversation display filter Define the filter conditions and then apply the filter to the data set The analyzer combines both filter definition and application in one dialog 1 8 Click the Display Filters icon Y on the Frame Display window or select Apply Modify Display Filters from the filter menu to open the Set Condition dialog box From the Select each frame combo box choose frames with the conversation as the initial condition Select an address type IP MAC TCP UDB from the Typecombo box The address type selection populates both Address combo boxes with node address in the data set that match the type selection Select a node address from the first Address combo box Choose
114. ed to break all connections to the Wireless Transceiver or we are not able to restart 2 Start the USB HCI packet sniffer On the data source find the Microsoft Wireless Transceiver and click the Start Sniffing button and click the Start Capturing button 3 Goto the Start menu and find the Microsoft Keyboard program and use it to reconnect the keyboard 28 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data 4 Goto the Start menu and find the Microsoft Mouse program and use it to reconnect the mouse 5 All traffic should now be sniffed 4 2 Protocol Stacks 4 2 1 Protocol Stack Wizard The Protocol Stack wizard is where you define the protocol stack you want the analyzer to use when Select a Protocol Stack decoding frames Select a protocol stack Build Your Own To start the wizard 3211MAC T 802 11 Radio Air Sniffer i BlueCore Serial Protocol BCSP from Cambridge Silicon Radio with autotraverse 1 Choose Protocol Stack from the Options a eit cee i i Bluetooth HCI USB with autotraverse menu on the Control window or click the Protocol Stack icon on the Frame remamsa jwt Protocol LE BB D ispl ay MWS Wireless Coexistence Interface 2 2 Select a protocol stack from the list and click kaaa naaa kam Finish Bluetooth Virtual Transport with Auto traverse Most stacks are pre defined here If you have special requirements and need to set up a custom stack see Creating and Removing
115. ed to a signal Any other nearby signal i e other digital inputs or outputs could cause the input to activate It is recommended that all undriven digital inputs be disabled or tied to ground USB Name Pin 1 2 3 and 4 ComProbe USB monitors four control signals NP Breakout Box USE ComProbe II Sniffer View Options Window Help OB nb Name Count State Green indicates On High True 1 Pin 1 Pin 2 Pin 3 Pin 4 Figure 4 43 ComProbe USB Breakout Box Display Digital inputs provide a means for users to insert events into the data stream There are four digital inputs that can be enabled individually HSU Frontline monitors six RS 232 control signals DTE Signals kf Breakout Box HSU View Options Window Help NB Name Count State Green indicates On High True 1 2 RTS 2 CTS 4 DSA 5 DTA B CD 7 RI Figure 4 44 ComProbe HSU Breakout Box Display e CTS Clear To Send e DSR Data Set Ready e CD Carrier Detect e RI Ring Indicator see the special note on capturing Ring Indicator changes 87 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual 4 5 1 1 Ring Indicator The following information applies when operating the analyzer in Spy mode or Source DTE No FTS Cables mode When using the cables supplied with the analyzer to capture or source data Ring Indicator RI is routed to a different pin which generates interrupts normally There is a spe
116. een 1096 and 1848267 than the maximum or less than the minimum you will see the following dialog e Start up Opens the Program Start up Options window Start up options let you choose whether to start data capture immediately on opening the analyzer e Advanced Opens the Advanced System Options window The Advanced Settings should only be changed on advice of technical support 7 1 1 1 System Settings Disabled Enabled Options Some of the System Settings options are disabled depending upon the status of the data capture session e As the default all the options on the System Settings dialog are enabled e Once the user begins to capture data by selecting the Start Capture button some of the options on the System Settings dialog are disabled until the user stops data capture and either saves or erases the captured data e The user can go into the Startup options and Advanced system options on the System Settings dialog and make changes to the settings at any time 7 1 1 2 Advanced System Options These parameters affect fundamental aspects of the software and it is unlikely that you ever have to change them If you do change them and need to return them to their original values the default value is listed in parentheses to the right of the value box Most technical support problems are not related to these parameters and as changing them could have serious consequences for the performance of the analyzer we strongly recommen
117. em saves the template and closes the Template Prorat i Frontined CM Manager dialog Hontined 3 Click the OK button on the Set Initial Decoder Parameters window to apply the template and close the dialog Save Changes to a Template This procedure saves changes to parameters in an existing template 1 After making changes to parameter settings in a user defined template click the Save button at the top of the Set Initial Decoder Parameters window to display the Template Manager dialog 2 Ensure that the name of the template is listed in the Name to Save Template As text box and click OK 3 The system displays a dialog asking for confirmation of the change to the existing template Click the Yes button The system saves the parameter changes to the template and closes the Save As dialog 4 Click the OK button on the Set Initial Decoder Parameters window to apply the template and close the window 3 2 1 3 Deleting a Template 1 After opening the Set Initial Decoder Parameters window click the Delete button in the toolbar The system displays the Template Manager dialog with a list of saved templates 25 ComProbe USB User Manual Chapter 3 Configuration Settings 2 Select click on and highlight the template marked for deletion and click the Delete button The system removes the selected template from the list of saved templates 3 Click the OK button to complete the deletion process and close the Delete dialog
118. eneral Information This chapter provides advanced system set up and configuration information timestamping information and general reference information such as ASCII baudot and EBCDIC codes This chapter also provides information on how to contact Frontline s Technical Support team should you need assistance 1 2 Computer Minimum System Requirements Frontline supports the following computer systems configurations e Operating System Windows 7 and 8 e USB Port USB 2 0 or USB 3 0 High Speed The ComProbe software must operate on a computer with the following minimum characteristics e Processor Core i5 processor at 2 7 GHz e RAM 4 GB e Free Hard Disk Space 20 GB 1 3 Software Installation 1 3 1 From CD Insert the ComProbe installer disc into your DVD drive Click on the Install CPAS shortcut and follow the directions Chapter 1 ComProbe Hardware amp Software ComProbe USB User Manual 1 3 2 From Download Download the latest CPAS installer from FTE com Once downloaded double click the installer and follow the directions Chapter 2 Getting Started In this chapter we introduce you to the ComProbe hardware and show how to start the ComProbe analyzer software and explain the basic software controls and features for conducting the protocol analysis 2 1 USB Hardware The following sections describe the USB hardware connectors and hardware setup 2 1 1 Hardware Description The ComProbe USB hardware is used for ex
119. es with a cap extension based on RFC 1761 For file format see http www fags org rfcs rfc1761 html e Shomiti Surveyor files in Snoop format files with a cap extension For file format contact Technical Support e CATC Merlin files with a csv extension Files must be exported with a specific format See File Format for Merlin Files for information e CATC Chief files with a txt extension 6 4 Printing 6 4 1 Printing from the Frame Display HTML Export The Frame Display Print dialog and the Frame Display HTML Export are very similar This topic discusses both dialogs Frame Display Print The Frame Display Print feature provides the user with the option to print the capture buffer or the current selection The maximum file size however that can be exported is 1000 frames When Print Preview is selected the output displays in a browser print preview window where the user can select from the standard print options The output file format is in html and uses the Microsoft Web Browser Control print options for background colors and images Print Background Colors Using Internet Explorer 1 Open the Tools menu on the browser menu bar 2 Select Internet Options menu entry 3 Click Advanced tab 4 Check Print background colors and images under the Printing section 5 Click the Apply button then click OK Configure the Print File Range in the Frame Display Print Dialog Selecting more than one frame in the Fram
120. etect errors 1 2 3 Open the Event Display window Click and drag to select the data for which you want to generate a CRC Click on the CRC icon f Choose CRC Method In the CRC dialog box click on the down arrow to show the list of choices for CRC algorithms Sum 1 s comp Lancel Enter a Seed value in hexadecimal if desired Sum 2 s comp a LAC OR Help Click OK to generate the CRC It appears in the byte information pi la a lines at the bottom of the Event Display window Whenever you CRC 16rew select a range of data a CRC is calculated automatically CPE CCITT CRC CCITTrev CAL HDLC 4 3 5 Calculating Delta Times and Data Rates 1 2 a Click on the Event Display icon PP on the Control window to open the Event Display window Use the mouse to select the data you want to calculate a delta time and rate for The Event Display window displays the delta time and the data rate in the status lines at the bottom of the window 36 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Event Display Homer cfa File Edit View Format Bookmarks a Window Help a e EIH 8a 00 41 00 Ob ef ld 0d 0a 7b 43 49 A 76 57 00 74 0 2c 30 Od 0a Sa amp Co CO AN DO ne G mW oe U U 4 UOD Se m y Ti m m m m NG 05 agd EC 00 i my 5c m P aa Fz lt A yo HE 48 70 IT Tr Ti Tr Trt Li Figure 4 2 Delta fields 4 3 6 Switching Between Live Update and
121. f particular topics e Chapter 1 ComProbe Hardware and Software This chapter will describe the minimum computer requirements and how to install the software e Chapter 2 Getting Started Here we describe how to set up and connect the hardware and how to apply power This chapter also describes how to start the ComProbe software in Data Capture Methods You will be introduced to the Control window that is the primary operating dialog in the ComProbe software e Chapter 3 Configuration Settings The software and hardware is configured to capture data Configuration settings may vary for a particular ComProbe analyzer depending on the technology and network being sniffed There are topics on configuring protocol decoders used to disassemble packets into frames and events e Chapter 4 Capturing and Analyzing Data This Chapter describes how to start a capture session and how to observe the captured packets frames layers and events e Chapter 5 Navigating and Searching the Data Here you will find how to move through the data and how to isolate the data to specific events often used for troubleshooting device design problems e Chapter 6 Saving and Importing Data When a live capture is completed you may want to save the captured data for future analysis or you may want to import a captured data set from another developer or for use in interoperability testing This chapter will explain how to do this for various data file formats e Chapter 7 G
122. fa log txt csv cap Select the file and click Open The analyzer automatically converts the file to the analyzer s format while keeping the original file in its original format You can save the file in the analyzer s format close the file without saving it in the analyzer s format or have the analyzer automatically save the file in the analyzer s format see the System Settings to set this option All of these options keep your original file untouched When you first open the file the analyzer brings up the Protocol Stack window and ask you what protocol decodes if any you want to use You must choose a protocol decode at this point for the analyzer to decode the data in the file If you open a file without using any decodes and decide later that you want to apply a decode choose Reframe from the File menu on the Control window e Frontline Serialtest Async and Serialtest Com Probe for DOS requires the byt for data and the tim for timestamps see note on importing DOS timestamps e Greenleaf ViewComm 3 0 for DOS requires the byt for data and the tim for timestamps see note on importing DOS timestamps 115 Chapter 6 Saving and Importing Data ComProbe USB User Manual e Frontline Ethertest for DOS requires 3 files filename cap filename caO and filename ca1 e Sniffer Type 1 supports files with the enc extension Does not support Sniffer files with a cap extension e Snoop or Sun Snoop fil
123. file to search 2 Open the Event Display PD or Frame Display 5 window 3 Click on the Find icon Ah or choose Find from the Edit menu 4 Click on the Time tab of the Find dialog Note The tabs displayed on the Find dialog depend on the product you are running and the content V4 of the capture file you are viewing Decode Pattem Time GoTo Special Event Bookmark Relative kamal sarap ataizi Bapu EET How Second 1 1 000000 Second a dh dl da Bilis e Go bo the bmestamp CG On o baoe the specified lima O Onor after the specihed lime Figure 5 6 Find by Time tab The analyzer can search by time in several different ways Search for Absolute Relative timestamp 99 Chapter 5 Navigating and Searching the Data ComProbe USB User Manual e Absolute An absolute timestamp search means that the analyzer searches for an event at the exact date and time specified If no event is found at that time the analyzer goes to the nearest event either before or after the selected time based on the Go to the timestamp selection e Relative A relative search means that the analyzer begins searching from whatever event you are currently on and search for the next event a specific amount of time away 1 Select Absolute or Relative 2 Select the date and time using the drop down lists for Month Year Day Hour Minute Second 1 10000000 I Note Month and Year are not available if you select Relative
124. fine just a few layers of the protocol stack and the remaining layers can be determined based on the lower layers 1 Click the All additional stack layers can be determined automatically button 2 If your protocol stack is complete and there are no additional layers click the There are no additional stack layers button 30 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data 3 If you select this option the analyzer uses the stack you defined for every frame Frames that do use this stack are decoded incorrectly Save the Stack 1 Click the Add To Predefined List button 2 Give the stack a name and click Add In the future the stack appears in the Protocol Stack List on the first screen of the Protocol Stack wizard Remove a Stack 1 Select it in the first screen and click Remove Selected Item From List 2 If you remove the stack you must to recreate it if you need to use it again Note If you do not save your custom stack it does appear in the predefined list but applies to the H frames in the current session However it is discarded at the end of the session 4 2 3 Reframing If you need to change the protocol stack used to interpret a capture file and the framing is different in the new stack you need to reframe in order for the protocol decode to be correct You can also use Reframe to frame unframed data The original capture file is not altered during this process Note You cannot reframe fro
125. for other reasons Note some implementations lack the ability to count dropped packets Those implementations may set the cumulative drops value to zero Timestamp Microseconds A 64 bit signed integer representing the time of packet arrival in microseconds since midnight January 1st O AD nominal Gregorian In order to avoid leap day ambiguity in calculations note that an equivalent epoch may be used of midnight January 1st 2000 AD which is represented in this field as OXOOEO3AB44A676000 Packet Data Variable length field holding the packet that was captured beginning with its datalink header The Datalink Type field of the file header can be used to determine how to decode the datalink header The length of the Packet Data field is given in the Included Length field Note that the length of this field in not necessarily rounded to any particular multi octet boundary as might otherwise be suggested by the diagram Data Format All integer values are stored in big endian order with the high order bits first 7 2 3 Ring Indicator The following information applies when operating the analyzer in Spy mode or Source DTE No FTS Cables mode When using the cables supplied with the analyzer to capture or source data Ring Indicator RI is routed to a different pin which generates interrupts normally There is a special case involving Ring Indicator and computers with 8250 UARTs or UARTs from that family where the state of RI may
126. frames are sorted in ascending numerical sequence by frame number Click on a column header in the Summary pane to sort the frames by that column For example to sort the frames by size click on the Frame Size column header An embossed triangle next to the header name indicates which column the frames are sorted by The direction of the triangle indicates whether the frames are in ascending or descending order with up being ascending Note that it may take some time to sort large numbers of frames 4 4 1 6 Frame Display Find Frame Display has a simple Find function that you can use to search the Decode Pane for any alpha numeric value This functionality is in addition to the more robust Search Find dialog Frame Display Find is located below the toolbar on the Frame Display dialog Frame Display bpa bt le cfa Pa YU ST DIO HAAS hi eom 3 OO Find RB C Sum Figure 4 7 Frame Display Find text entry field Where the more powerful Search Find functionality searches the Decode Binary Radix and Character panes on Frame Display using Timestamps Special Events Bookmarks Patterns etc 49 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual Decode Pattem Tune GoTo Special Events Search for C Absolute O Relive Rare Honth i Hel J Daw Hour te Second 1 1 000000 Second 111 E E Si 71000 ro A 7 i Go bo the bimaitamg CG On o baoe the specified lima O Ono
127. frontline bug Communications Faster USB 2 0 PROTOCOL ANALYZER User Manual Revision Date 11 2 2015 ComProbe USB User Manual Copyright 2000 2015 Frontline Test Equipment Inc Frontline Frontline Test System ComProbe Protocol Analysis System and ComProbe are registered trademarks of Frontline Test Equipment Inc The Bluetooth SIG Inc owns the Bluetooth word mark and logos and any use of such marks by Frontline is under license All other trademarks and registered trademarks are property of their respective owners ComProbe USB User Manual Contents Chapter 1 ComProbe Hardware amp Software 1 dc WV ele IS in EIS MAINA 3 0e eee tect eee eee eh oe eee een EE aene castes AEEA EAEE E rAr eiS TEN EE 2 1 2 Computer Minimum System Requirements 2 eee eee eee eee eee eee eee cece onnu 2 1 3 SON Ware Instalati ad hn eect E A S 2 PLRO a ee bee eee 2 1 3 2 From Download La ot at maan celica ticandiadee Gerd scecamodmesdet eccue ndash aeoesnescceeesesaws 3 Chapter 2 Getting Started HA 4 21 WISE An CN CA eee ene essa tceee eet eee 4 2 1 1 Hardware Description _ _ 2 222 2c eee cee LLLA LLALL LALL Laaa aLaaa aaran 4 2 1 2 Connecting the ComProbe USB to the Device Under Test 0 eee eee eee eee 6 2 1 2 1 Connecting Only One Device Under Test u eee eee eee oaaao oonan 6 2 1 2 2 Connecting More Than One Device Under Test 0 eee ce eee c cece e eee eeee 7
128. g 0 22 ole eee cece cece cece cece ee ceeceeeececceeees 77 4 4 2 About The Message Sequence Chart MSC aa 77 4 4 2 1 Message Sequence Chart Search AG NA NANANA NA giunda we suduecsbsnubeaadncsteeeos 82 4 4 2 2 Message Sequence Chart Go To Frame eee eee cece cece cece cece eeeeees 83 4 4 2 3 Message Sequence Chart First Error Frame e cece eee cece eee ee ccceeceeceeees 84 4 4 2 4 Message Sequence Chart Printing 22 2 e eee eee cece cece e cece eee eeeeeees 84 4 5 Analyzing Control Signal Changes Real Time c eee cece eee cece cece ccc cecceecccecceecees 86 4 5 1 Breakout Box Window 22222 20 0 o ieee eee ee ee ee ee eee eee eee eee e eee eee 86 4 5 1 1 Ring Indicator 2 22 ieee cc eee ce eee cece cee cece cece cece eceeeeeceeeceeceeees 88 4 5 2 Reading the Breakout Box Window 2 2 2 cece ee cee cee eee cece eee eee eeeeeeeeeeeeeees 88 4 5 3 The Breakout Box Toolbar 2a ncossccceecasecescersrsteniadasnceeeeetebasascasceancstenresuteasou 88 4 5 4 Selecting Breakout Box Options _ _ 2 22 22 eee ee cece cee eee 222222 oao 2o22 oann 89 4 5 4 1 Performance Notes cscscceusutcddecdGenabdackGusseceostecueeceuadceeaaSeuseneelesesdeenseeebues 89 4 6 Viewing Historical Signal Changes e cece cee cee cece 0o02 a22 cece eee eeeeeeeeeeeeeees 90 4 6 1 Signal Display Window 22 cece eee eee cc ccc cece
129. g the source and destination channel IDs 4 2 6 Providing Context For Decoding When Frame Information Is Missing There may be times when you need to provide information to the analyzer because the context for decoding a frame is missing For example if the analyzer captured a response frame but did not capture the command frame 33 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data indicating the command The analyzer provides a way for you to supply the context for any frame provided the decoder supports it The decoder writer has to include support for this feature in the decoder so not all decoders support it Note that not all decoders require this feature If the decoder supports user provided context three items are active on the Options menu of the Control window and the Frame Display window These items are Set Initial Decoder Parameters Automatically Request Missing Decoding Information and Set Subsequent Decoder Parameters These items are not present if no decoder is loaded that supports this feature Set Initial Decoder Parameters is used to provide required information to decoders that is not context dependent but instead tends to be system options for the protocol Choose Set Initial Decoder Parameters in order to provide initial context to the analyzer for a decoder A dialog appears that shows the data for which you can provide information If you need to change this information for a particula
130. ge O Al Selection Note Bowie pari ophons may alfect whether ary gay background amp parted See Help lo mio Figure 6 3 Event Display Print Dialog 3 Click the OK button If you chose Print Preview the system displays your data in a browser print preview display with options for printing such as page orientation and paper size You can also use your Printer Preferences dialog to make some of these selections When printing your data the analyzer creates an html file and prints the path to the file at the bottom of the page This file can be opened in your browser however it may appear different than the printed version 6 5 Exporting 6 5 1 Frame Display Export You can dump the contents of the Summary pane on the Frame Display into a Comma Separated File csv To access this feature 1 Right click on the Summary pane or open the Frame Display File menu 2 Select the Export menu item 3 Select a storage location and enter a File name 4 Select Save 119 Chapter 6 Saving and Importing Data ComProbe USB User Manual 6 5 2 Exporting a File with Event Display Export With the Event Display Export dialog you can export the contents of the Event Display dialog as a test txt CSV csv HTML htm or Binary File bin You also have the option of exporting the entire capture buffer or just the current selection of the Event Display dialog Event Display Export File name C Users Frontline Desk
131. gned PSM but the principle is the same for RFCOMM channel numbers and TCP UDP port numbers The analyzer looks for SDP Service Attribute Responses or Service Search Attribute Responses carrying protocol descriptor lists If the analyzer sees L2CAP listed with a PSM it stores the PSM and the UUID for the next protocol in the list After the SDP session is over the analyzer looks at the PSM in the L2CAP Connect frames that follow If the PSM matches one the analyzer has stored the analyzer stores the source channel ID and destination channel ID and associates those channel IDs with the PSM and UUID for the next protocol Thereafter when the analyzer sees L2CAP frames using those channel IDs it can look them up in its table and know what the next protocol is In order for the analyzer to be able to auto traverse using a dynamically assigned PSM it has to have seen the SDP session giving the Protocol Descriptor Lists and the subsequent L2CAP connection using the PSM and identifying the source and channel IDs If the analyzer misses any of this process it is not able to auto traverse It stops decoding at the L2CAP layer For L2CAP frames carrying a known PSM 0x0001 for SDP for example or 0x0003 for RFCOMM the analyzer looks for Connect frames and stores the PSM along with the associated source and destination channel IDs In this case the analyzer does not need to see the SDP process but does need to see the L2CAP connection process givin
132. he driver s buffer and puts the data into the capture buffer Driver Buffer Overflows occur when the user interface does not retrieve frames from the driver quickly enough Buffer overflows are indicated in the Event Display window by a plus sign within a circle Clicking on the buffer overflow symbol displays how many frames have been lost There are several things that you can do to try and solve this problem e Use capture filters to filter out data you don t need to see Capture filters reduce the amount of data processed by the analyzer Ethernet Only e Close all other programs that are doing work while the analyzer is running Refrain from doing searches in the Event Display window or other processor intensive activities while the analyzer is capturing data e Timestamping takes up processor time primarily not in timestamping the data but in writing the timestamp to the file Try turning off timestamping from the Timestamping Options window e For Driver Buffer Overflows change the size of the driver buffer This value is changed from the Advanced System Settings Go to the Control window and choose System Settings from the Options menu Click on the Advanced button Find the value Driver Receive Buffer Size in Operating System Pages Take the number listed there and double it e The analyzer s number one priority is capturing data updating windows is secondary However updating windows still takes a certain amount of processor
133. he list of special events Use Check All or Uncheck All buttons to make your selections more efficient 6 Click Find Next and Find Previous to move to the next instance of the event Not all special events are relevant to all types of data For example control signal changes are relevant only to serial data and not to Ethernet data For a list of all special events and their meanings see List of all Event Symbols on page 40 5 1 6 Searching by Signal Searching with Signal allows you to search for changes in control signal states for one or more control signals You can also search for a specific state involving one or more control signals with the option to ignore those control signals whose states you don t care about The analyzer takes the current selected byte as its initial condition when running searches that rely on finding events where control signals changed To access the search by time function 1 Opena capture file to search 2 Open the Event Display NG or Frame Display P window 3 Click on the Find icon Ah or choose Find from the Edit menu 4 Click on the Signal tab of the Find dialog 103 Chapter 5 Navigating and Searching the Data ComProbe USB User Manual Note The tabs displayed on the Find dialog depend on the product you are running and the content H of the capture file you are viewing Search for eveni where re ai mode of these Cy One oF more of these changed from off bo on DES a
134. he same controls are available under the View menu There are three navigation icons also on the toolbar i This takes you to the first Information Frame This takes you to first Protocol State Message X This takes you to the first Error Frame Click here to learn more about this option If there is both Classic and low energy packets there will be a Classic and LE tab at the top of the dialog 78 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data File Edit View Help IAZANR BZROSCO BSS Classic LE All Layers Ctrl Summary Non Msg Summary LE BB LE ADV LE DATA LE LL A Classic and LE Tabs shown if both Classic and LE packets are available NESN 0 A MD 0 Length 0 Figure 4 32 Classic and LE tabs If the Classic tab is selected you will see Classic protocols If you select the LE tab you will see LE Protocols If there is only Classic or only LE the Classic and LE tabs will not appear Al Layers BBE LMP L CAP AVDTP AVDTP Signaling AZDP Also along the top of the dialog are a series of protocol tabs The tabs will vary depending on the protocols Clicking on a tab displays the messaging between the master and slave for that protocol For example if you select RFCOMM you will see the messaging between the RFCOMMfM Master and the RFCOMM S Slave Channel Signaling Length 0 Channel Signaling Length 0 The Non Message Summary
135. hether you want to export data from the Host Function Control or Both e Choose Host Function Control or Both to determine how you want to export the data 120 ComProbe USB User Manual Chapter 6 Saving and Importing Data 5 Choose Host Function Control or Both to determine how you want to export the data 6 Choose whether you want to display multiple events or single events per row Events Per Row You can choose to display Multiple Events Per Row but this method contains no timestamps If you select One Event Per Row you can display timestamps multiple events or single events per row Note The raw timestamp value is the number of 100 nanosecond intervals since the H beginning of January 1 1601 This is standard Windows time The timestamp data types displayed in columns for One Event Per Row Timestamp Delta Event Number Byte Number Frame Number Type Hex Dec Oct Bin Side ASCII 7 bit ASCII EBCDIC Baudot RTS CTS DSR DTR CD RI UART Overrun Parity Error Framing Error 7 Ifyou select csv as the file type choose whether you want to hide display Preambles or Column Headings in the exported file 121 Chapter 6 Saving and Importing Data ComProbe USB User Manual 8 Click Save The Event Display Export file is saved to the locations you specified in File name a A B G D E F G H l J K 1 Timestamp Delta Event Number Byte Number Frame Number Type Hex iDec Oct Bin ASCII 632
136. his ts the Event Pane Copy Selection to Clipboard Mee Oo Hgzmgm HO Select Entire Frame Displaying all events means that special Change Text Highlight Color events such as Start of Frame End of Frame and any signal change events are displayed as special symbols within the data Display All Events The status lines at the bottom of the pane give the same information as the status lines in the Event Display window This includes physical data errors control signal changes if appropriate and timestamps Because the Event pane displays the physical bytes rather than the logical bytes the data in the Event pane may be different from that in the Radix Binary and Character panes See Physical vs Logical Byte Display for more information Colors are used to show which protocol layer each byte belongs to The colors correspond to the layers listed in the Decode pane The Event Radix Binary Character and Decode panes are all synchronized with one another Clicking on an element in any one of the panes highlights the corresponding element in all the other panes 4 4 1 11 9 Change Text Highlight Color Whenever you select text in the Binary Radix or Character panes in Frame Display the text is displayed Text Higham oe with a highlight color You can change the color of the highlight Select Color 1 Select Change Text Highlight Color from the Cancel Options menu You can also access the option by right cl
137. ht click in the center of the data display window to change between mixed and side over side modes by selecting Display Sides Together A check mark is displayed Click on Display Sides Together to remove the check mark and return to side by side display 4 Right click in the sides panel on the right of the data display and select Display Sides Together A check mark is displayed Click on Display Sides Together to remove the check mark and return to side by side display 39 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual 4 3 7 5 List of all Event Symbols By default the Event Display shows all eventsevents which includes control signal changes start and end of frame characters and flow control changes If you want to see only the data bytes click on the All Events button Click again to display all events Click on asymbol and the analyzer displays the symbol name and sometimes additional information in the status lines at the bottom of the Event Display window For example clicking on a control signal change symbol displays which signal s changed In addition to data bytes the events shown are in alphabetical order Table 4 3 Event Symbols Broken Frame The frame did not end when the analyzer expected it to This occurs most often with protocols where the framing is indicated by a specific character control signal change or other data related event Buffer Overflow Indicates a buffer overflow
138. icking in any of the panes Defaults 2 Selecta color from the drop down menu 3 Click OK The highlight color for the text is changed 60 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Select Cancel to discard any selection Select Defaults to return the highlight color to blue 4 4 1 12 Protocol Layer Colors 4 4 1 12 1 Data Byte Color Notation The color of the data in the panes specifies which layer of the protocol stack the data is from All data from the first layer is bright blue the data from the second layer is green the third layer is pink etc The protocol name for each layer in the Decode pane is in the same color Note that the colors refer to the layer not to a specific protocol In some situations a protocol may be in two different colors in two different frames depending on where it is in the stack You can change the default colors for each layer Red is reserved for bytes or frames with errors In the Summary pane frame numbers in red mean there is an error in the frame Also the Errors tab is displayed in red This could be a physical error in a data byte or an error in the protocol decode Bytes in red in the Radix Character Binary and Event panes mean there is a physical error associated with the byte 4 4 1 12 2 Changing Protocol Layer Colors You can differentiate different protocol layers in the Decode Event Radix Binary and Character panes 1 Choose Select Protocol Layer
139. ies to use with our products On the Web http fte com support supportrequest aspx Email tech_support fte com If you need to talk to a technical support representative about your ComProbe USB product support is available between 9 am and 5 pm U S Eastern Time zone Monday through Friday Technical support is not available on U S national holidays Phone 1 434 984 4500 Fax 1 434 984 4505 Instructional Videos Frontline provides a series of videos to assist the user and may answer your questions These videos can be accessed at fte com support videos aspx On this web page use the Video Filters sidebar to select instructional videos for your product s142 Appendicies Appendix A Application Notes 143 ComProbe USB User Manual Appendicies 144 Appendix A Application Notes 145 Appendicies Index A Aborted Frame 126 About Display Filters 62 About USB Decoder Parameters 26 Absolute Time 132 Add a New or Save an Existing Template 25 Adding a New Predefined Stack 30 Adding Comments To A Capture File 114 Advanced System Options 125 Apply Capture Filters 64 Apply Display Filters 62 65 67 ASCII 39 character set 137 viewing data in 39 ASCII Codes 137 ASCII Pane 59 Auto Sizing Column Widths 57 Automatically Request Missing Decoding Information 32 Automatically Restart 123 Automatically Restart Capturing After Clear Capture Buffer 123 Automatically Save Imported Ca
140. ill up the screen o Display Entire Buffer Zooms all the way out to display the contents of the entire buffer in the window Find Opens the Control Signal change window Snap to Nearest Change Moves the cursor to the nearest signal change whenever you click on the line graphics in the window Find the line for the control signal whose changes you want to see Click on that line and the analyzer moves to the nearest signal change for that control signal You can also highlight a range and the analyzer snaps to the 2 nearest changes on either side of the range Timestamping Options Opens the Timestamping Options window where you can change the timestamping resolution and how timestamps are displayed 4 6 3 Reading the Signal Display Control signal changes are displayed in a graphical format On the left side of the screen is a list of the signals currently being displayed and to the right of each name is a line displaying the state of the signal over time A single line means that the signal was logically off while a double line means that the signal was logically on Dotted lines are used for signals that were not present at the time of capture For example if you are monitoring a circuit that does not use CD that line appears as a dotted line in the control signal display The four information lines at the bottom of the window tell you what events are being shown in the window and where you are in relation to the buffer a
141. ing with data you can recreate the frm file the companion file to the cfa file Recreating the frm file helps ensure that the decoders will work properly Reload Decoders a The plug ins are reset and received frames are decoded again 13 Chapter 2 Getting Started ComProbe USB User Manual Table 2 3 Control Window File Menu Selections continued Live amp Open Capture File Opens a Windows Open file dialog at the default location Capture Public Documents Frontline Test Equipment My Capture File Files Capture files have a cfa extension Saves the current capture or capture file Opens a Windows Save As dialog at the default location Public Documents Frontline Test Equipment My Capture Files Exit ComProbe Shuts down the ComProbe Protocol Analysis System and all Protocol Analysis open system windows System Recent capture files A list of recently opened capture files will appear The View menu selections will vary depending on the ComProbe analyzer in use Table 2 4 Control Window View Menu Selections Live amp Event Display Ctri Opens the Event Display window for analyzing byte level Capture Shift E data File Frame Display Ctrl Opens the Frame Display window for analyzing protocol Shift M level data Signal Display Ctrl Opens the Signal Display window that provides a graphical Shift N display of control signal transitions Breakout Box Ctrl Opens the Breakout Box window that pr
142. ini DIN Pin Numbers Chapter 2 Getting Started ComProbe USB User Manual eee 1 mini ih Pin Spoar ee Numb ouma ove e ouma fen e ra f 8 The ComProbe is powered from the USB port of the analysis computer and doesn t require an external power source 2 1 2 Connecting the ComProbe USB to the Device Under Test Once you have the software and the drivers loaded the next step is to connect your hardware The recommended configuration requires two computers one for communicating with the device under test and the other for displaying the results of the analysis Note Although the ComProbe USB can download analyzed data on a full speed USB 1 1 connection it is strongly recommended that you connect it using a high speed USB 2 0 port to H obtain optimal performance If you experience any trouble with your analyzer please ensure it is connected on a high speed USB 2 0 enabled host controller before contacting our technical support 2 1 2 1 Connecting Only One Device Under Test The most straightforward configuration involves only one device to be analyzed Figure 2 5 shows how to properly connect the device under test Test Computer Analysis computer Device Under Test Figure 2 5 Connecting Only One Device Under Test To prevent connection problems please adhere to the following instructions e Make sure that NO USB DEVICE is plugged into the same root hub as the Device Under Test DUT An extraneous USB de
143. input lines in the middle of one of the packet groups that is being filtered that group will not be discarded In this way the context for the digital input line change is preserved 1 Select I O Settings from the Options menu on the Control window 2 Selecta checkbox to filter out one or more of the following packets e SOF Discard Start of Frame packets This setting is on by default e Polling IN packets e INFACK IN NAK e PING NAK e PRE Discard all PRE tokens e SPLIT Enabling this option will cause the hardware to discard many polling split packet groups The split groups that will be discarded are 18 Chapter 3 Configuration Settings ComProbe USB User Manual o SSPLIT IN o SSPLIT IN ACK o CSPLIT IN NAK o CSPLIT IN NYET o CSPLITHOUT NYET o CSPLIT SETUP NYET e All bus activity e Chrip J K pairs e Keep alives e Packets matching analyzer s device address 3 Once you have selected the filters select Enable all Filters Digital Input Enabling Options Digital inputs provide a means for users to insert events into the data stream There are four digital inputs that can be enabled individually Each line is identified by a different color Line 1 is brown 2 is pink 3 is orange and 4 is yellow Whenever an enabled input changes state it will issue an event and be tagged with a timestamp of when the input was interpreted by the analyzer Digital inputs can not exceed a rate of 30 MHz Digital inputs that occur faster
144. ion Frames Sade Revinchon Search vahou regad bo data ongin C Search onb these sides w OTE m OE Figure 5 3 Find Decode Tab Side Restriction There are several options for error searching on the Decoder tab e Search For String in Decoder allows you to enter a string in the text box You can use characters hex or binary digits wildcards or a combination of any of the formats when entering your string Every time you type in asearch string the analyzer saves the search The next time you open Find the drop down list will contain your search parameters e Search for All Errors finds frame errors as well as frames with byte level errors such as parity or CRC errors e Search for Frame Errors Only finds frame specific errors such as frame check errors e Search for Information Frame only searches information frames 1 Enter the search string 2 Check Ignore Case to do a case insensitive search 3 When you have specified the time interval you want to use click on the Find Next or Find Previous buttons to start the search from the current event The result of the search is displayed in the Decode pane in Frame Display 96 ComProbe USB User Manual Chapter 5 Navigating and Searching the Data Side Restrictions Side Restriction means that the analyzer looks for a pattern coming wholly from the DTE or DCE side If you 9 Event Display KIER choose to search without regard for data origin the ana
145. ion dialog box 2 Click the Advanced button on the Set Condition dialog box 3 Select Include or Exclude radio button Now you can set the conditions for the filter 4 Select the initial condition for the filter from the combo box at the bottom of the dialog for Select each frame Condition Select each frame where the protocol 5 Set the parameters for the selected condition in with the conversation the fields provided The fields that appear in the in the range dialog box are dependent upon the previous selection Continue to enter the requested parameters in the fields provided until the conditions statement is complete with the size 6G lt Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual NOT Condition where the protocol 7777 exists x Le lo lie Figure 4 18 Two Filter Conditions Added with an AND Operator 6 Click the plus icon on the left side of the dialog box and repeat steps 4 and 5 for the next condition Use the up t and down 4 arrow icons on the left side of the dialog box to order your conditions and the delete button pa to delete conditions from your filter 7 Continue adding conditions until your filter is complete 8 Include parentheses as needed and set the boolean operators 9 Click OK 10 The system displays the Save Named Condition dialog Provide a name for the filter condition or accept the default name provided by the system and click OK Save Nam
146. isplay 2 Event Display 2 opens This Event Display is labeled 2 even though there is no original Event Display to indicate that it is synchronized with Frame Display 2 4 Click on a frame in Frame Display 2 The corresponding bytes are highlighted in Event Display 2 5 Click on a frame in the original Frame Display Event Display 2 does not change 51 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual 4 4 1 8 Working with Multiple Frame Displays Multiple Frame Displays are useful for comparing two frames side by side They are also useful for comparing all frames against a filtered subset or two filtered subsets against each other e To create a second Frame Display click the Duplicate View icon dg on the Frame Display toolbar This creates another Frame Display window You can have as many Frame Displays open as you wish Each Frame Display is given a number in the title bar to distinguish it from the others e To navigate between multiple Frame Displays click on the Frame Display icon O in the Control window toolbar A drop down list appears listing all the currently open Frame Displays e Select the one you want from the list and it comes to the front Note When you create a filter in one Frame Display that filter does not automatically appear H in the other Frame Display You must use the Hide Reveal feature to display a filter created in one Frame Display in another S Note When you hav
147. ith all panes active ee eee cece eee ce cee cece eceeeeceeceeceeeees 43 Figure 4 7 Frame Display Find text entry field c ee cece cece ee ceeeees 49 Figure 4 8 Search Find Dialog a 50 Figure 4 9 Frame Display File menu Byte Export eee eee eee eee cece eee eceeeees 53 Figure 4 10 Byte Export dialog cece ce cee cece cece eee cece ee ceceececeeeececeeeees 53 Figure 4 11 Save As dialog 2 22 c eee cece e cece eee cece cece ee ceeeeceeeeeeeee 54 Figure 4 12 Sample Exported Frames Text File e eee cee cece cece cece cceeeeceeceeeees 54 Figure 4 13 Example Protocol Tags lee e cece cece cece cece cece eee e anorani 55 Figure 4 14 Summary pane right with Tooltip on Column 5 Tran ID u cece eee ee eee 56 Figure 4 15 Frame Display Protocol Layer Color Selector o cece eee eee eee ee ee eee 61 Figure 4 16 Example Set Conditions Self Configuring Based on Protocol Selection 63 Figure 4 17 Example Set Conditions Self Configuring Based on Frame Range 64 Figure 4 18 Two Filter Conditions Added with an AND Operator eee e eee eee eee eee eee 66 Figure 4 19 Save Named Filter Condition Dialog 0 22 l eee eee eee eee eee 66 Figure 4 20 Using Named Filters Section of Quick Filters to Show Hide Filters
148. ize Item type 7 MB Desktop F a Libraries Mm Downloads JA John W Trinkle Recent Places JM Computer Ga Network Libraries Ji Frontline ComProb File folder Documents K Frontline ComProb File folder a Music m Frontline ComProb File folder Pictures d Frontline ComProb File folder a Subversion a a File name ByteLevelExport 1 bt x Save as type Text Files bd a Hide Folders Save Cancel Figure 4 11 Save As dialog Click on the Save button The exported frames are in a text file that can be opened in any standard text editing application The header shows the export type the capture file name the selected filter tab and the number of frames The body shows the frame number the timestamp in the same format shown in the Frame Display Summary pane and the frame contents as raw bytes ByteLevelExport 1 txt Notepad ol 28 File Edit Format View Help Byte export of all filtered in frames a Capture file le modified channel maps HID kbd cant decrypt GAIT cfa Filter tab Unfiltered 1 299 frames exported Frame Number Timestamp Frame Contents 1 7 5 2012 6 05 23 966944 PM 00 ff b2 00 15 aa d6 be 89 8e 00 13 96 bi eb d7 90 b o 2 7 5 2012 6 05 23 967570 PM 18 ff ae 00 15 aa d6 be 89 Be 00 13 7b 96 bi eb d7 90 0 3 7 5 2012 6 05 23 968195 PM 4e ff b3 00 15 aa d be 89 8e 00 13 7b 96 bi eb d7 90 0 4 7 5 2012 6 05 23 994441 PM 00 ff b2 00 15 aa d be 89 8e 00 13
149. k one copy of the Event Display and analyze your data while the second Event Display updates as new data is captured Event Display is synchronized with the Frame Display and Mesage Sequence Chart dialogs Selecting a byte in Event Display will also select the related frame in the Frame Display and the related message in the Message Sequence Chart 4 3 2 The Event Display Toolbar P Home Brings the Control window to the front a Home Brings the Control window to the front Save Prompts user for a file name If the user supplies a name a cfa file is saved sf Clear Discards the temporary file and clears the display 34 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data il lt BBBBUS amp GP 868 a MSC Chart Opens the Message Sequence Chart Signal Display Opens The Signal Display dialog Lock In the Lock state the window is locked so you can review a portion of data Data capture continues in the background Clicking on the Lock icon unlocks the window Unlock In the Unlock state the screen fills in the data captured since the screen lock and moves down to display incoming data again Clicking on the Unlock icon locks the window Open Breakout Box window that provides a real time graphical view of control signals Duplicate View Creates a second Event Display window identical to the first Frame Display framed data only Brings up a Frame Display with the frame of the currently
150. kbd cant_decrypt_ Edit View Format Filter Bookmarks Options Window Go Live Open Capture File Close Save Save Selection Reframe 1 le modified channel maps HID_kbd cant_decrypt_GATT cfa 2 example_btsnoop_hcilog cfa 3 C Users BPA500 cfa 4 C Users SDIO_20121005 cfa Print Print Preview Export Byte Export HTML Export Reload Decoders Recreate Companion File Figure 4 9 Frame Display File menu Byte Export 2 From the Byte Export window specify the frames to export e All Frames exports all filtered in frames including those scrolled off the Summary pane Filtered in frames are dependent on the selected Filter tab above the Summary pane Filtered out frames are not exported e Selected Frames export is the same as All Frames export except that only frames selected in the Summary pane will be exported Byte Export 28 Export raw bytes from the currently selected filter tab All Frames C Selected Frames Figure 4 10 Byte Export dialog Click the OK button to save the export Clicking the Cancel button will exit Byte Export 3 The Save As dialog will open Select a directory location and enter a file name for the exported frames file 53 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual J Save As xs OU z Desktop gt v Search Desktop p Organize v New folder EG ir Favorites a Name f S
151. l and Signaling Frames SummMay 2 eee eee cece cece cece eeceecececeeeeecee 81 Figure 4 36 Packet Layers Shown in Different Colors 200222 e cee eee eee ee ee ee eee eee 81 Figure 4 37 Right Click in Ctrl Summary to Display Show in MSC 222 e eee eee eee cece eee eeee 81 Figure 4 38 MSC View of Selected Packet from Ctrl Summary 22 2 e ee eee ee eee 82 Figure 4 39 Return to Text View Using Right Click Menu a 82 Figure 4 40 Highlighted First Search Result eee eee cece cece cece eee ceeeeeeeee 83 Figure 4 41 Message Sequence Chart Print Preview _ 2 22 eee e cece eee cece ccc eceececccecceeees 85 Figure 4 42 Print Preview Toolbar coe c cece c ec cece cece eee eee e cece ooann onnon 85 Figure 4 43 ComProbe USB Breakout Box Display 2 2 eee ee cee cece ee eee eee e cee ceeeeeeeeeeees 87 Figure 4 44 ComProbe HSU Breakout Box Display 22 222 e eee eee ee eee cece eee cece eeeee 87 Figure 4 45 USB Signal Display Window 2 220 cece cece ccc e cece cece ccc e cee eceececeeeceeeeeeees 91 Figure 4 46 HSU Signal Display Window 0 cece cece ec cece cece eee e cece eee eceeeeeees 91 Figure 4 47 USB Signal Display Options 22 22 c eee cee cee eee c ccc eee e cece ceeceeeeeceeeeeeees 93 Figure 5 1 Find Dialog 2 22 2 ec ecccececec
152. l layers can be hidden preventing them from being Ki displayed on the Decode pane Right click on any protocol layer Hide LAC AP Layer In All Frames and choose Hide protocol name from the right click menu Expand All Nodes Provide AVDTP Rules In a USB transaction all messages that comprise the transaction are shown together in the detail pane The color coding that is applied to layers when the detail pane displays a single message 58 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data is applied to both layers and messages when the detail pane displays a transaction To keep the distinction between layers and messages clear each header of each message in the detail pane ends with the word Message or Messages The latter is used because data and handshake messages are shown as a single color coded entry Each protocol layer is represented by a color which is used to highlight the bytes that belong to that protocol layer in the Event Radix Binary and Character panes The colors are not assigned to a protocol but are assigned to the layer The Event Radix Binary Character and Decode panes are all synchronized with one another Clicking on an element in any one of the panes highlights the corresponding element in all the other panes Click the Toggle Expand Decode Pane icon IF to make the Decode pane taller This allows for more of a lengthy decode to be viewed without needing to scroll
153. le to start the software and used only for viewing capture files o Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual To manually unframe your data 1 Select Unframe from the File menu on the Control window Unframe is only available if a protocol stack was used to capture the data and there is currently no protocol stack selected In addition to choosing to Unframe you can also be prompted to Unframe by the Protocol Stack Wizard 1 Load your capture file by choosing Open from the File menu on the Control window 2 Select the file to load 3 Choose Protocol Stack from the Options menu on the Control window 4 Select None from the list 5 Click Finish The Protocol Stack Wizard asks you if you want to unframe your data and put it into a new file 6 Choose Yes The system removes the frame markers from your data puts the unframed data into a new file and opens the new file The original capture file is not altered See Reframing on page 31 for instructions on framing unframed data 4 2 5 How the Analyzer Auto traverses the Protocol Stack In the course of doing service discovery devices ask for and receive a Protocol Descriptor List defining which protocol stacks the device supports It also includes information on which PSM to use in L2CAP or the channel number for RFCOMM or the port number for TCP or UDP The description below talks about how the analyzer auto traverses from L2CAP using a dynamically assi
154. lect Don t Care Is Equal to or Is Not Equal to from the Endpoint drop down list e Ifyou select Is Equal to or Is Not Equal to enter a value for the Endpoint e The Endpoint must be entered in Hexadecimal The range is O F 21 ComProbe USB User Manual Chapter 3 Configuration Settings d Data pattern to match in Hex You can specify data match pattern for Line 4 as well as which data packets to match Select Don t Care Is Equal to or Is Not Equal to from the Data pattern to match in Hex drop down list e If you select Is Equal to or Is Not Equal to select one or more of the data patterns checkboxes o DATAO o DATA o DATA2 o MDATA e Enter a hex value in the text box o Every data packet with the specified PID will have its data payload matched against as much of the pattern as the data payload size So a data packet with an 8 byte data payload will be compared against the first 8 bytes of the data match pattern And a data packet with a 64 byte payload will be compared against the first 64 bytes of the data pattern The data match pattern can be up to 1024 bytes in length o You must enter the data pattern in hexadecimal For example A1 2B 01or A1 2B 01 Note Si Only when all possible selections for a given packet are completely checked can the output be activated Click OK to save the settings and exit the dialog The Clear button is used to clear all settings in the dialog 3 2 Decoder Parameters Some prot
155. less room is used to store timestamps You can increase the size of your capture file in the System Settings 7 1 4 4 Switching Between Relative and Absolute Time With Timestamping you can choose to employ Relative Time or Absolute time 1 Choose System Settings from the Options menu on the Control window and click the Timestamping Options button or click the click the Timestamping Options icon f3 from the Event Display O window 2 Go to the Display Options section at the bottom of the window and find the Display Relative Timestamps checkbox 3 Check the box to switch the display to relative timestamps Remove the check to return to absolute timestamps Note The options in this section affect only how the timestamps are displayed on the screen not Si how the timestamps are recorded in the capture file e Display Raw Timestamp Value shows the timestamp as the total time in hundred nanoseconds from a specific point in time e Display Relative Timestamps shows the timestamp as the amount of time that has passed since the first byte was captured It works just like a stop watch in that the timestamp for the first byte is 0 00 00 0000 and all subsequent timestamps increment from there The timestamp is recorded as the actual time so you can flip back and forth between relative and actual time as needed e Selecting both values displays the total time in nanoseconds from the start of the capture as opposed to a specific point in ti
156. lied a description of the filter appears to the right of the toolbar in the Frame Display windows Notes e The system requires naming and saving of all filters created by the user e The OK button on the Set Condition dialog box is unavailable grayed out until the condition selections are complete e When you have multiple Frame Display windows with a display filter or filters those filter do not automatically appear in other Frame Display windows You must use the Hide Reveal feature to display a filter created in one Frame Display in different Frame Display window 4 4 1 13 1 2 Including and Excluding Radio Buttons All filter dialog boxes contain an Include and an Exclude radio button These buttons are mutually exclusive The Include Exclude selection becomes part of the filter definition and appears as part of the filter description displayed to the right of the Toolbar Include A filter constructed with the Include button selected returns a data set that includes frames that meet the conditions defined by the filter and omits frames that do not Exclude A filter constructed with the Exclude button selected returns a data set that excludes frames that meet the conditions defined by the filter and consists of frames that do not 64 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data 4 4 1 13 1 3 Named Display Filters You can create a unique display filter by selecting a data type on the Frame Displa
157. lyzer limits Control window functions to those that are useful for analyzing data contained in the current file Because you cannot capture data while using Capture File Viewer data capture functions are unavailable For example when viewing Ethernet data the Signal Display is not available The title bar of the Control window displays the name of the currently open file The status line below the toolbar shows the configuration settings that were in use when the capture file was created 2 3 1 Control Window Toolbar Toolbar icon displays vary according to operating mode and or data displayed Available icons appear in color while unavailable icons are not visible Grayed out icons are available for the ComProbe hardware and software configuration in use but are not active until certain operating conditions occur All toolbar icons have corresponding menu bar items or options Table 2 2 Control Window Toolbar Icon List aaa a 2 b DP Event Display framed data only Opens a Event Display with the currently selected bytes highlighted selected bytes highlighted a Frame Display framed data only Opens a Frame Display with the frame of the currently 11 Chapter 2 Getting Started ComProbe USB User Manual Table 2 2 Control Window Toolbar Icon List continued Notes Opens the Notes dialog B Open Breakout Box window that provides a real time graphical view of control signals A Extract Data Audio Opens the Ex
158. lyzer looks Fie Edt View Format Options Window Help for a pattern coming from one or both sides For example if you Pa a MB bi S2 AF ss 8 choose to search for the pattern ABC and you choose to search without regard for data origin the analyzer finds all three instances of ABC shown here The first pattern with the A and the C coming from the DTE device Event 16to 42 of Ea a and the B coming from the DCE is a good example of how using a Rate Deka CRC DTE CRC DCE side restriction differs from searching without regard to data origin No Timestamp No Timestamp 9c 35 While searching without regard for data origin finds all three For Help Press F1 patterns searching using a side restriction never finds the first pattern because it does not come wholly from one side or the other If you choose to search for the pattern ABC and you restrict the 4 Event Display f all search to just the DTE side the analyzer finds the following pattern Fie Ect Yew Format Options Window aga maisama In this example the analyzer finds only the second pattern highlighted above because we restricted the search to just the DTE side The first pattern doesn t qualify because it is split between the DTE and DCE sides and the third pattern though whole comes from just the DCE side Evert 16 to 42 of 6 425 27 events Rate Deka CREDTE CRC DCE No Timestamp No Timestamp 9c 35 Por Help Press FI If we choose both the DTE
159. lyzing Data ComProbe USB User Manual 1 Click on Event Display menu Options and select Change the Font Size i Set Timestamp Format Change the Font Size Choose CRC Method F7 Figure 4 4 Event Display Options menu 2 Choose a font size from the list Change Font Size Size E g i0 11 12 14 16 Figure 4 5 Event Display Font Size Selection 3 Click OK 4 4 Analyzing Protocol Decodes 4 4 1 Frame Display Window To open this window Click the Frame Display icon 6 on the Control window toolbar or select Frame Display from the View menu 42 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Ch irera Deoploy Horaris 2 Se Ties A Pau HES bk p Fema Gr Flee Lee Fr F i Ma G abana MNoOeBecce7d dip AA Decode Pang Aa pira PHD NT eee lala Codie e manga dances Lisa cael I CAN MH Baacbarsl LMP PoCo HA Bhactoodh FHS LACAP SDF RECOMM AWDTP maa AWDTP Sagnabog Heart Alor Capisard bala Pula Ga E Fame Fo Deia Pee CG TEPE LUD fife LAAPA SEON ARON Len bg ba imo o waa O O Di i Ge Ha b 5 summan Pang ari i Moos Of G Mi Le Oo amp 1 _ ta 7 Wwa i 2 3b L Ge tra 1 a ma Moa ar a Maia O Di Del Le Logcal Link P kart ca ro ipinia ba z noe Dal a Pani Lowey A g9 a DO g a mi W o Da ka a Co k Ta LIP MIS 11 i a Fg 1 S10 2 5 1 5 E Fg 3 i a 50 j p
160. m the Capture File Viewer accessed by selecting Capture File Viewer or Load Capture File to start the software and used only for viewing capture files To reframe your data load your capture file select a protocol stack and then select Reframe from the File menu on the Control window Reframe is only available if the frame recognizer used to capture the data is different from the current frame recognizer In addition to choosing to Reframe you can also be prompted to Reframe by the Protocol Stack Wizard 1 Load your capture file by choosing Open from the File menu on the Control window and select the file to load 2 Select the protocol stack by choosing Protocol Stack from the Options menu on the Control window select the desired stack and click Finish 3 Ifyou selected a protocol stack that includes a frame recognizer different from the one used to capture your data the Protocol Stack Wizard asks you if you want to reframe your data Choose Yes 4 The analyzer adds frame markers to your data puts the framed data into a new file and opens the new file The original capture file is not altered See Unframing on page 31 for instructions on removing framing from data 4 2 4 Unframing This function removes start of frame and end of frame markers from your data The original capture file is not altered during this process You cannot unframe from the Capture File Viewer accessed by selecting Capture File Viewer or Load Capture Fi
161. mbered when they are first captured and how this affects the display windows in the analyzer The information in this section applies to frame numbering as well When the analyzer captures an event it gives the event a number If the event is a data byte event it receives a byte number in addition to an event number There are usually more events than bytes with the result is that a byte might be listed as Event 10 of 16 when viewing all events and Byte 8 of 11 when viewing only the data bytes The numbers assigned to events that are wrapped out of the buffer are not reassigned In other words when event number 1 is wrapped out of the buffer event number 2 is not renumbered to event 1 This means that the first event in the buffer may be listed as event 11520 of 16334 because events 1 11519 have been wrapped out of the buffer Since row numbers refer to the event numbers they work the same way In the above example the first row would be listed as 2d00 which is hex for 11520 The advantage of not renumbering events is that you can save a portion of a capture file send it to a colleague and tell your colleague to look at a particular event Since the events are not renumbered your colleague s file use the same event numbers that your file does 7 2 6 Useful Character Tables 7 2 6 1 ASCII Codes LU Oe EP EOT ENGIACK EEL BE UT ee LO SD LE ix oue oct oc2 Dc3 0C4 nak SyN ETB CAN ew suslesclrs Tes Rs us left 137 Com
162. me e Selecting neither value displays the actual chronological time When you select Display Relative Timestamp you can set the number of digits to display using the up or down arrows on the numeric list 132 Chapter 7 General Information ComProbe USB User Manual 7 1 4 5 Displaying Fractions of a Second 1 Choose System Settings from the Options menu on the Control Pm window and click the Timestamping Options button or click the click the Timestamping Options icon f from the Event Display O window 2 Go to the Display Options section at the bottom of the window and find the Number of Digits to Display box 3 Click on the arrows to change the number You can display between O and 6 digits to the right of the decimal point 7 2 Technical Information 7 2 1 Performance Notes As a software based product the speed of your computer s processor affects the analyzer s performance Buffer overflow errors are an indicator that the analyzer is unable to keep up with the data The information below describes what happens to the data as it arrives what the error means and how various aspects of the analyzer affect performance Also included are suggestions on how to improve performance The analyzer s driver takes data from the driver and counts each byte as they are put into the driver s buffer The analyzer s driver tells the user interface that data is ready to be processed The analyzer takes the data from t
163. med filters are persistent across sessions 62 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data e Named filters are user defined User defined filters persist in a template file User defined filters can be deleted Quick Filters e Quick Filters are combinations of Protocol Filters and or Named Filters that are displayed on the Quick Filter tab e Quick Filters cannot be saved and do not persist across sessions e Quick Filters are created on the Quick Filter Dialog 4 4 1 13 1 1 Creating a Display Filter There are two steps to using a display filter Define the filter conditions and then apply the filter to the data set The system combines both filter definition and application in one dialog 1 Click the Display Filters icon Y on the Frame Display window or select Apply Modify Display Filters from the Filter menu to open the Set Condition dialog box The Set Condition dialog is self configuring which means that when you Select each frame under Conditions the following displayed fields depend on your selection With each subsequent selection the dialog fields will change depending on you selection in that field Set Condition S ee Currently Active Condition lt Untitled gt Include Exclude Condition Select each frame where the protocol m0 AVCTP X field x Command Response x Is Not Present v v All Fields Advanced Cancel Help
164. mmary pane Right click and select Connection Filter in the pop up menu The procedure for creating a connection filter are identical as described in From the Frame Display Filter menu above If the frame you have selected is associated with a Classic Bluetooth link or a Bluetooth low energy access address an additional pop up menu item will appear as shown in the example image below This selection is a predetermined filter based on your selection In the example frame 6471 is associated with Link 4 so the predetermined filter assumes that you may want create a connection filter for that link Clicking on Connection Filter Link 4 will filter in Link 4 frames without opening all the drop down menus GG Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual Bz Frame ASCII Hex Fram Delta Timestamp 4 13 2015 10 55 This is the Summary Pane Copy Selection to Clipboard Save Selection Go To v Show Frame Size Column Show Timestamp Column Show Delta Column Add New Column Help Remove New Column Change Column Order Help Restore Default Columns m Add Bookmark Export T TA Connection Filter k Classic a All Connection Filter Link 4 Bluetooth low energy Link Provide L2CAP Rules Set Subsequent Decoder Parameters Show Hidden Panes f Figure 4 26 Connection Filter from frame selection right click Creating from a
165. n protocol layers MISC displays a concise overview of a Blutetooth connection highlighting the essential elements fo the connection At a glance you can see the flow of the data including role switches connection requests and errors You can Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual look at all the packets int he capture or filter by protocol or profile the MSC is color coded for a clear and easy view of your data H Message Sequence Chart MSC o 8 Z ALAN AMOS NG Bae All Layers Ctrl Summary Non Msg Summary BB LMP L2CAP SDP RFCOMM i 3 635 11 57 15 345497 Open signaling channel H RFCOMM_SABM Channel Signaling Length 0 3 640 11 57 15 348624 RFCOMM channel s that are Open Signaling Parameter Negotiation 3 645 11 57 15 351747 Command Channel Signaling Length 10 FC Sender Supports CF 3 650 11 57 15 354874 3 640 11 57 15 348624 Baseband connection encryption started LL RFCOMM_SABM 3 730 11 57 15 465497 Open OBEX channel Li For Help Press F1 3 723 11 57 15 461124 Figure 4 31 Message Sequence Chart Window How do access the chart You access the Message Sequence Chart by selecting the icon H or MSC Chart from the View menu from the Control window or Frame Display What do I see on the dialog D D N At the top of the dialog you see four icons that you use to zoom in and out of the display vertically and horizontally T
166. ne ComProbe Protocol Analysis System lt version gt 1 Double click the Frontline ComProbe Protocol Analysis System desktop folder This opens a standard Windows file folder window di bk Frontline ComProbe Protocol Analysis System 12 11 662 0 hd Include in library Share with Burn New folder Ka Bm D Name rites sktop d Development Tools wnloads di Documentation cent Places J Maintenance Tools ogle Drive 28 Capture File Viewer EL ComProbe 802 11 with Wireshark aE cuments dh Documents Select to open Capture Methods Figure 2 8 Desktop Folder Link 2 Double click on Frontline ComProbe Protocol Analysis System and the system displays the Select Data Capture Method dialog ComProbe USB User Manual Chapter 2 Getting Started Note You can also access this dialog by selecting Start gt All Programs gt Frontline H ComProbe Protocol Analysis System Version gt Frontline ComProbe Protocol Analysis System Three buttons appear at the bottom of the dialog Run Cancel and Help When the dialog first opens Cancel and Help are active and the Run button is inactive grayed out Bur starts the selected protocol stack closes the dialog and exits the user back to the desktop takes the user to this help file as does pressing the F1 key 3 Expand the folder and select the data capture method that matches your configuration 4 Click on the Run button and the ComProbe Control Windo
167. ng Data The following sections describe the various ComProbe software functions that capture and display data packets 4 1 Capture Data 4 1 1 USB HCI Sniffing The analyzer restarts the USB Bluetooth Device when the Start Sniffing button on the Control dialog is pressed Some USB Bluetooth devices are unable to restart if they are connected to another Bluetooth Device If this is the case you should 1 Break the connection between the device you want to sniff and any devices it is communicating with 2 Click the Start Sniffing button 3 Reconnect the devices so that you can sniff the connection See Microsoft Keyboard and Mouse for a specific example on how to sniff in this scenario 4 1 1 1 Sniffing the Microsoft Keyboard and Mouse To sniff the Microsoft Keyboard and Mouse start the USB HCI packet sniffer select the Wireless Transceiver and select the Start Sniffing button On some versions of Windows the Windows USB driver cannot reset when it is in use In this case you get an error saying Invalid Selection device may be in use To get around this problem use the following steps to sniff the Keyboard and Mouse 1 The first thing you need to do is to break the connections from the keyboard and mouse to the Wireless Transceiver There is a button on the bottom of the keyboard Press this button and hold for a bit to make sure it took effect There is a similar button at the bottom of the mouse Press and hold it too We ne
168. ng or Deleting a Bookmark eee cece cece c cece ccc cccceeceeceees 111 5 2 2 Displaying All and Moving Between Bookmarks 2222 eee ee eee ee eee ee eee eee 112 Chapter 6 Saving and Importing Data _ 20 22 oie ec ec ence cee eee cece cece nananana 114 6 1 Adding Comments to a Capture File cc cee c eee e cece ee eeceeeeeees 114 6 2 Confirm Capture File CFA Changes c cece cece ccc eee eee e cece ccc e ce ceeceececceceececeeees 114 6 3 Loading and Importing a Capture File _ 0 22 2 cece cece cece cece cece eee eeeceeees 115 6 3 1 Loading a Capture File os cee dope occas dtucueniscual ede beedesematacediusesons ekedaeteee dbsodereaoeeueese 115 6 3 2 Importing Capture Files 2 20 le ee ec cece ec eee cece eee e eee ee eeeeeeeeceeeeees 115 OA PINE saaan kaaa aa Aa Aa a cee AG sean chee encasen eer eetscunaecenteteesses 116 6 4 1 Printing from the Frame Display HTML Export 222 22 2 eee eee eee cece cece cee eeceeeeeree 116 6 4 2 Printing from the Event Display 22 le cece eee ec ec eee cece cece eee ceeceeeeeeeeees 118 GO EX DOVUNS aaa cece ccs cosc e a sbeebs ease ee AG AA a SANG BAE LA ED AE 119 6 5 1 Frame Display Export ada a bul ncwcedebbesddcceniuadececekiesuedsdadeoweudeeecudusceeexds 119 6 5 2 Exporting a File with Event Display Export e eee cece cece cece eee eeeeeee 120 6 5 2 1 Export Filter Out 2 220 lec a 122 PAGA
169. ntrol characters as e matches any byte or hex or binary digit To enter 8477 or prefix with character Figure 5 4 Find Pattern Tab Patten Erie Hew values at fo Binary value 53 Lbbbbbbbb Control characlers at ec 2 matches any bets or hex of bry dg To enter 3k77 or preii wath chasacter Side Fetih O Search only there sides IDTE DCE Figure 5 5 Find Pattern Tab Side Restrictions Pattern allows you to enter a string in the text box You can use characters hex or binary digits control characters wildcards or a combination of any of the formats when entering your string Every time you type in a search string the ComProbe analyzer saves the search The next time you open Find the drop down list will contain your search parameters 1 Enter the search pattern 2 Check Ignore Case to do a case insensitive search 98 ComProbe USB User Manual Chapter 5 Navigating and Searching the Data 3 When you have specified the pattern you want to use click on the Find Next or Find Previous buttons to start the search from the current event The result of the search is displayed in the in Frame Display and Event Display Refer to Searching by Decode on page 95 for information on Side Restrictions 5 1 3 Searching by Time Searching with Time allows you search on timestamps on the data in Frame Display and Event Display window To access the search by time function 1 Opena capture
170. ny Frame Display window A Connection Filter can be created from any open Frame Display window and the filtering will always be applied to the original captured data set 4 4 1 13 2 2 Connection Filter Display Once you have selected which connections to filter in another Frame Display will open The original Frame Display will remain open and can be minimized Note The system currently limits the number of frame displays to 5 This limit includes any Frame Displays opened using Duplicate View dg from the Toolbar see Working with Multiple Frame Displays on page 52 The new Frame Display with the filtered connection frames will only contain the data defined by the filter criteria That is the criteria could be a single link or data for a particular technology 74 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Display Example 1 Bluetooth low energy Access Address selected p Frame 1 Len 53 LE BB i Header Length 13 Header Version 3 H CP H 1 iw Channel Index 37 2402 MHz Meets Predefined Filter Criteria fo i Receive Status Received witho Decryption Initiated No Signal Strength 7 medium PDU Length 37 B LE PKT i Preamble Oxaa Access Address Ox8e89bed6 ke CRC Oxfe96e6 LE ADY i PDU Type ADY_IND i Advertiser Address Type random iv Payload Length 35 AD Data GAD Element i Length 2 i i AD Type Flags 3 GAD Data BR EDR No
171. ocol decoders have user defined parameters These are protocols where some information cannot be discovered by looking at the data and must be entered by the user in order for the decoder to correctly decode the data For example such information might be a field where the length is either 3 or 4 bytes and which length is being used is a system option There may be times when the context for decoding a frame is missing For example if the analyzer captures a response frame but does not capture the command frame then the decode for the response may be incomplete The Set Initial Decoder Parameters window allows you to supply the context for any frame The dialog allows you to define any number of parameters and save them in a template for later use The decoder template function provides the capacity to create multiple templates that contain different parameters This capability allows you to maintain individual templates for each Bluetooth network monitored Applying a template containing only those parameters necessary to decode transmissions particular to an individual network enhances the efficiency of the analyzer to decode data If you have decoders loaded which require decoder parameters a window with one tab for every decoder that requires parameters appears the first time the decoder is loaded For help on setting the parameters click the Help button on each tab to get help information specific to that decoder If you need to change th
172. odes the packet type The PID may be followed by anywhere from O to 1026 bytes depending on the packet type The PID byte is self checking in order for the PID to be valid the last 4 bits must be a one s 20 Chapter 3 Configuration Settings ComProbe USB User Manual complement of the first 4 bits If a received PID fails its check the remainder of the packet will be ignored by the USB device Select Don t Care Is Equal to or Is Not Equal to from the PID drop down list e If you select Is Equal to or Is Not Equal to for line 3 choose a Packet Identifier PID value from the drop down list b Device Address Select Don t Care Is Equal to or Is Not Equal to from the drop down list for the Device Address e Ifyou select Is Equal to or Is Not Equal to enter a value for the Device Address e The Device Address must be entered in Hexadecimal The range is 00 7F c Endpoint The endpoint is the fundamental unit of communication in USB All data is transferred through virtual pipes between the host and these endpoints All communication between a USB host and a USB device is addressed to a specific endpoint on the device Each device endpoint is a unidirectional receiver or transmitter of data either specified as a sender or receiver of data from the host Select Don t Care Is Equal to or Is Not Equal to from the Endpoint drop down list e Ifyou select Is Equal to or Is Not Equal to enter a value for the Endpoint e The Endpoint m
173. of the Find dialog 5 The system displays the Find dialog with the Go To tab selected Note The tabs displayed on the Find dialog depend on the product you are running and the H content of the capture file you are viewing Ska Decode Patten Tine GoTo Special Ewerdt Bookmark a Frame Humbe Merve Eorratd Data Event Humber Move Back Al Everts Number gis Figure 5 7 Find Go To tab To go to a particular frame 1 Select the Frame Number radio button 2 Type the frame number in the box 3 Click the Go To button 101 Chapter 5 Navigating and Searching the Data ComProbe USB User Manual 4 To move forward or backward a set number of frames type in the number of frames you want to move 5 Then click the Move Forward or Move Back button To go to a particular event 1 Select the Data Event Number or All Events Number radio button 2 Type the number of the event in the box 3 Click the Go To button 4 To move forward or backwards through the data type in the number of events that you want to move each time 5 Then click on the Move Forward or Move Backward button 6 For example to move forward 10 events type the number 10 in the box and then click on Move Forward Each time you click on Move Forward Frontline moves forward 10 events See Event Numbering for why the Data Event Number and All Events Number may be different As a general rule if you have the Show All Events icon
174. oftware engine called the ComProbe Protocol Analysis System or ComProbe software Whether you are sniffing the air or connecting directly to the chip Frontline analyzers use the same powerful ComProbe software to help you test troubleshoot and debug communications faster ComProbe software is an easy to use and powerful protocol analysis platform Simply use the appropriate ComProbe hardware or write your own proprietary code to pump communication streams directly into the ComProbe software where they are decoded decrypted and analyzed Within the ComProbe software you see packets frames events coexistence binary hex radix statistics errors and much more This manual is a user guide that takes you from connecting and setting up the hardware through all of the ComProbe software functions for your ComProbe hardware Should you have any questions contact the Frontline Technical Support Team ComProbe USB User Manual Chapter 1 ComProbe Hardware amp Software 1 1 What is in this manual The ComProbe User Manual comprises the following seven chapters The chapters are organized in the sequence you would normally follow to capture and analyze data set up configure capture analyze save You can read them from beginning to end to gain a complete understanding of how to use the ComProbe hardware and software or you can skip around if you only need a refresher on a particular topic Use the Contents Index and Glossary to find the location o
175. om the Frame Display 116 Progress Bars 137 Protocol Protocol Layer Colors 61 Protocol Layer Filtering 76 Protocol Stack 29 30 32 Q Quick Filtering 76 Radix 38 59 realtime 86 90 Reframe 31 Appendicies Reframing 31 Relative Time 99 132 Remove Bookmarks 111 112 Columns 57 Custom Stack 29 Filters 67 68 Framing Markers 31 Reset Panes 52 Resolution 131 Resumed 40 Revealing Protocol Layers 48 RS 138 Save 64 Saving Display Filter 63 Imported Capture Files 123 Search 95 97 99 101 102 107 110 112 binary value 97 bookmarks 112 character string 97 errors 107 eventnumber 102 frame number 101 hex pattern 97 pattern 97 special event 102 timestamp 99 wildcards 97 Seed Value 36 151 ComProbe USB User Manual Serial Driver 140 Short Break 41 Side Names 129 Sides 129 Signal Display 90 92 Signal Display Options 93 Signal Display Toolbar 91 Sorting Frames 49 Special Events 102 Start 40 Start Up Options 126 Summary 54 Summary Pane 54 57 58 Sync Dropped 41 Sync Found 41 Sync Hunt Entered 41 Sync Lost 41 Synchronization 51 System Settings 123 125 T Technical Support 142 Test Device Began Responding 41 Test Device Stopped Responding 41 Timestamp 111 131 132 Timestamping 111 130 132 Timestamping Disabled 41 Timestamping Enabled 41 Timestamping Options 123 130 Timestamping Resolution 131 Timestamps 130 132 Truncated Frame 41 ComProbe USB User Manual Appendicies Underrun Error 41
176. ondition dialog box displays the current filter definition at the top of the dialog To display another filter click the Open 2 icon and select the filter from the pop up list of all the saved filters 2 Editthe desired parameter of the condition Because the required fields for a condition statement depend upon previously selected parameters the Set Condition dialog box may display additional fields that were not present in the original filter In the event this occurs continue to enter the requested parameters in the fields provided until the condition statement is complete 3 Click OK The system displays the Save Named Condition dialog Ensure that the filter name is displayed in the text box at the top of the dialog and click OK If you choose to create an additional filter then provide a new name for the filter condition or accept the default name provided by the system and click OK The Set Condition dialog box closes and the system applies the modified filter Note When a display filter is applied a description of the filter appears to the right of the toolbar in H the Frame Display windows Note The OK button on the Set Condition dialog box is unavailable grayed out until the H condition selections are complete Deleting a Condition in a Filter If a display filter has two or more conditions you can delete conditions If there is only one condition set in the filter you must delete the filter using Delete Display Filte
177. ovides a real time Shift B graphical view of control signal changes Extract Data Audio Opens the Data Audio Extraction dialog for pulling data from decoded Bluetooth protocols Table 2 5 Control Window Edit Menu Selections Capture Ctrl Opens the Notes window that allows the user to add File Shift O comments to a capture file 14 ComProbe USB User Manual Chapter 2 Getting Started Table 2 6 Control Window Options Menu Selections Live amp Hardware Settings 0 Classic Capture File 1 Bluetooth low energy I O Settings 0 Classic 1 Bluetooth low energy System Settings Alt Opens the System Settings dialog for configuring capture Enter files Directories Opens the File Locations dialog where the user can change the default file locations Check for New When this selection is enabled the program automatically Releases at Startup Protocol Stack checks for the latest Frontline protocol analyzer software releases Opens the Side Names dialog used to customize the names of the slave and master wireless devices Opens the Select a Stack dialog where the user defines the protocol stack they want the analyzer to use when decoding frames Set Initial Decoder Parameters Opens the Set Initial Decoder Parameters window Each entry in the window takes effect from the beginning of the capture onward or until redefined in the Set Subsequent Decoder Parameters dialog This selection is
178. pn Pns if Pan 4 Figure 5 9 Find Signal tab Find 51A 161 cfa Decode Pattem Time GoTo Special Events Signal Emo Bor 4 Search for avert where GG One of more of these Cj One cr move of ihare changed changed bom on bo off Find Freviou cy One ce more of these Cy This exactly lana changed trom off bo on describes the Hae mor ARTS cts F D5A FOTA Fco FR 104 ComProbe USB User Manual Chapter 5 Navigating and Searching the Data Figure 5 10 Find Signal Tab You will choose one qualifier Searching for event where then choose one or more control signals Control Signals The section with the check boxes allows you to specify which control signals the analyzer should pay attention to when doing the search The analyzer pays attention to any control signal with a check mark Click on a box to place a check mark next to a control signal Click again to uncheck the box By default the analyzer searches all control signals which means all boxes start out checked For example if you are only interested in finding changes in RTS and CTS you would check those two boxes and uncheck all the other boxes This tells the analyzer to look only at the RTS and CTS lines when running the search The other signals are ignored The control signals types include USB Pin 1 USB Pin 2 USB Pin 3 USB Pin 4 RS232 Request to Send RTS RS232 Clear to Send CTS RS232 Data Se
179. pture Files 123 Autotraversal 30 32 Baudot 39 122 Baudot Codes 137 Begin Sync Character Strip 41 Binary 38 98 Binary Pane 60 BL 139 147 ComProbe USB User Manual Bluetooth USB I O Settings 17 Bookmarks 111 112 Boolean 65 70 Breakout Box 88 Breakout Box Options 89 Breakout Box Window 86 Broken Frame 40 BS 139 BT Snoop File Format 134 Btsnoop 134 Buffer 123 Buffer Overflow 123 Buffer File Options 123 Byte 36 38 60 137 Searching 101 byte export 52 C Calculating Data Rates and Delta Times 36 Capture Buffer 123 125 Capture Buffer Size 123 Capture File 114 115 123 125 auto save imported files 123 capture to a series of files 123 capture to one file 123 changing default location of 127 changing max size of 123 125 framing captured data 31 importing 115 loading 115 reframing 31 removing framing markers 31 ComProbe USB User Manual CFA file 114 Changing Default File Locations 127 Character 98 138 Character Pane 59 Character Set 39 137 138 Choosing a Data Capture Method 8 Clear Capture Buffer 123 CN 139 Color of Data Bytes 61 Colors 61 Comma Separated File 119 Compound Display Filters 65 Confirm CFA Changes 114 Context For Decoding 32 Control Characters 138 Control Signals 40 86 88 90 92 93 129 Control Window 16 123 Configuration Information 12 Conversation Filters 67 CPAS Control Window Toolbar 11 CR 139 CRC 36 CSV Files 119 Custom Protocol Stack 29 30
180. r 44 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data e When the selected frame is still being captured all Frame Display panes except the Summary pane display Frame incomplete 4 4 1 1 Frame Display Toolbar The buttons that appear in the Frame Display window vary according to the particular configuration of the analyzer For controls not available the icons will be grayed out Table 4 4 Frame Display Toolbar Icons Description Control Brings the Control window to the front Open File Opens a capture file I O Settings Opens the I O Settings dialog Save Save the currently selected bytes or the entire buffer to file Clear Discards the temporary file and clears the display Event Display Brings the Event Display window to the front Show Message Sequence Chart Message Sequence Chart MSC displays information about the messages passed between protocol layers Duplicate View Creates a second Frame Display window identical to the first Apply Modify Display Filters Opens the Display Filter dialog Quick Protocol Filter brings up a dialog box where you can filter or hide one or more protocol layers Protocol Stack brings up the Protocol Stack Wizard where you can change the stack used to decode framed data 45 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual Table 4 4 Frame Display Toolbar Icons continued Reload Decoders
181. r Templates u s cease cece hand Ahahaha ala 2 aa aa nhat haka aa tab hahah 24 ComProbe USB User Manual 3 2 1 1 Select and Apply a Decoder Template _ 0 220 1c ccc eee eee ee 24 3 2 1 2 Adding a New or Saving an Existing Template 0 c cee eee eee eee cece eee eeeeeee 25 3 2 1 3 Deleting a Template ecece eee eee eee eee cece cence eeeeeeee 25 3 2 2 USB Decoder Parameters ec ececece cecececeeecee eee ence cece cee eeeeeeeeeeees 26 3 2 2 1 About USB Decoder Parameters ee eee eee eee eee eee 26 3 2 2 2 USB Missing Decode Information a 26 3 2 2 3 USB Override Decode Information 0 2 ee ee eee eee eee 27 Chapter 4 Capturing and Analyzing Data aa 28 Mod Capelire BCE r e ences AA 28 AA USGBC SMM AA ses eetcaeute ase ERER 28 4 1 1 1 Sniffing the Microsoft Keyboard and Mouse 22 2 e eee eee cece eee cece eee eeeeeees 28 A2 Protocol Saeko AA AA AA 29 4 2 1 Protocol Stack Wizard ak AA E BANGA K AD KUNG sant abaucoebeusebideeaoneaonustseueeeeuuen ts 29 4 2 2 Creating and Removing a Custom Stack eee eee eee c ccc eee e ccc eeceeeeeeeceeeees 30 AA 31 A2 A UNAMING eerror E OE EREEREER 31 4 2 5 How the Analyzer Auto traverses the Protocol Stack l eee cee cece cece eeeee 32 4 2 6 Providing Context For Decoding When Frame Information Is Missing 32 4 3 Analy
182. r after the specihed img Figure 4 8 Search Find Dialog Find on Frame Display only searches the Decode Pane for a value you enter in the text box To use Find 1 Select the frame where you want to begin the search 2 Enter a value in the Find text box Find Anbenng True 4 Note Note The text box is disabled during a live capture Select Find Previous Occurren e_ to begin the search on frames prior to the frame you selected or Find Next Occurrence po to begin the search on frames following the frame you selected db Arterna Signal True The next occurrence of the value if it is found will be highlighted in Antenna True dim Tiara Qtheruation Fake db Tiansmi Alberuation Fake the Decode Pane 4 Select Find Previous Occurrence or Find Next Occurrence to continue the search There are several important concepts to remember with Find 50 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data e When you enter a search string and select Enter the search moves forward e If you select Find Previous Occurrence when the search reaches the first frame it will then cycle to the last frame and continue until it reaches the frame where the search began e Shift F3 is a shortcut for Find Previous Occurrence e If you select Find Next Occurrence when the search reaches the last frame it will then cycle to the first frame and continue until it reaches the frame where the search beg
183. r frame 1 Right click on the frame in the Frame Display window 2 Choose Provide lt context name gt Alternatively you can choose Set Subsequent Decoder Parameter from the Options menu 3 This option brings up a dialog showing all the places where context data was overridden 4 If you know that information is missing you can t provide it and you don t want to see dialogs asking for it un check Automatically Request Missing Decoding Information 5 When unchecked the analyzer doesn t bother you with dialogs asking for frame information that you don t have In this situation the analyzer decodes each frame until it cannot go further and then simply stop decoding 4 3 Analyzing Byte Level Data 4 3 1 Event Display To open this window click the Event Display icon PD on the Control window toolbar The Event Display window provides detailed information about every captured event Events include data bytes data related information such as start of frame and end of frame flags and the analyzer information such as when the data capture was paused Data bytes are displayed in hex on the left side of the window with the corresponding ASCII character on the right 343 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual 9 Event Display Homer cfa File Edit View Format Bookmarks B G Window Help AK Ev A t x Event Humber 3 4 o 3 10 11 12 13 14 15 432 Slave 00 01 5a 03 lm F 4a 04 a5 23
184. r groups are technology specific noe 8 oo Classic Bluetooth blue Bookmark a J Baseband LACAP TES LE BB LE PET LE ADV B021 Radis 80211 MAC Data Bluetooth low energy green a Dor PI CLF Dad oi dg ey a ig baa L 5 802 11 orange Figure 4 13 Example Protocol Tags e Clicking on a protocol filter tab in the General group filters in all packets containing that protocol regardless of each packet s technology e Clicking on a protocol filter tab in a technology specific group filters in all packets containing that protocol on that technology e A protocol filter tab appears in the General group only if the protocol occurs in more than one of the technology specific tab groups For example if L2CAP occurs in both Classic Bluetooth and Bluetooth low energy there will be L2CAP tabs in the General group the Classic Bluetooth group and the Bluetooth low energy group Select the Unfiltered tab to display all packets There are several special tabs that appear in the Summary pane when certain conditions are met These tabs appear only in the General group and apply to all technologies The tabs are 55 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual e Bookmarks appear when a bookmark is first seen e Errors appear when an error is first seen An error is a physical error in a data byte or an error in the protocol decode e
185. rap File File Size in K 81373 Min Max Sta Advanced Figure 7 1 System Settings Single File Mode This option allows the analyzer to capture data to a file Each time you capture the file you must provide a file name The size of each file cannot larger than the number given in File Size in K The name of each file is the name you give it in the Name box followed by the date and time The date and time are when the series was opened e Restart Capturing After Saving or Clearing Capture File If the Automatically Restart feature is enabled the analyzer restarts capture to the file immediately after the file is closed e Wrap File When enabled the analyzer wraps the file when it becomes full The oldest events are moved out of the file to make room for new events Any events moved out of the file are lost When disabled the analyzer stops capture when the file becomes full Either reset the file or close your capture file to continue e File Size The size of the file will depend of the available hard disk space 1 Click the Min button to see set the minimum acceptable value for the file size 2 Click the Max button to see set the maximum acceptable value for the file size 124 Chapter 7 General Information ComProbe USB User Manual FTS4USB dl You can accept these values or you can enter a unique file size Butif you try to close the dialog after entering a value greater A Enter an integer betw
186. rops Timestamp Microseconds Packet Data Original Length A 32 bit unsigned integer representing the length in octets of the captured packet as received via a network Included Length A 32 bit unsigned integer representing the length of the Packet Data field This is the number of octets of the captured packet that are included in this packet record If the received packet was truncated the Included Length field is less than the Original Length field Packet Flags 135 ComProbe USB User Manual Chapter 7 General Information Flags specific to this packet Currently the following flags are defined Table 7 3 Packet fais asenen t Ne Je yn Direction flag O Sent 1 Received ia Command flag 0 Data 1 Command Event Bit O is the least significant bit of the 32 bit word Direction is relative to host DTE i e for Bluetooth controllers Send is Host gt Controller Receive is Controller gt Host Note Some Datalink Types already encode some or all of this information within the Packet Data With these Datalink Types these flags should be treated as informational only and the value in the Packet Data should take precedence Cumulative Drops A 32 bit unsigned integer representing the number of packets that were lost by the system that created the packet file between the first packet record in the file and this one Packets may be lost because of insufficient resources in the capturing system or
187. rs from the Filters menu 69 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual 1 Click the Display Filters icon Y on the Frame Display window or select Apply Modify Display Filters from the Filter menu to open the Set Condition dialog box Click on the Advanced button to show the condition in Boolean format The dialog box displays the current filter definition To display another filter click the Open P3 icon and select the filter from the pop up list of all the saved filters Set Condition F3 ES Currently Active Condition Filters Include C Exclude Condition AND OR where the protocol Baseband field LT ADDR Is Egu AND In the range 178 to 43 Delete selected condtion Figure 4 21 Set Condition Dialog in Advanced View 2 Select the desired condition from the filter definition 3 Click the Delete Selected Line fye icon 4 Edit the Boolean operators and parentheses as needed 5 Click OK The system displays the Save Named Condition dialog Ensure that the filter name is displayed in the text box at the top of the dialog and click OK If you choose to create an additional filter then provide anew name for the filter condition or accept the default name provided by the system and click OK The Set Condition dialog box closes and the system applies the modified filter Note When a display filter is applied a description of the filter appears to the right of the toolbar in
188. s a whole e Current Snapshot The first line tells you what event numbers are in the current snapshot the total number of events and the amount of time that passed between the first event in the snapshot and the last event called Delta e Current Visible The second line gives the same information about the events that are currently visible in the window Because you can zoom in and out often the events being shown in the window are not the same as the number of events in the current snapshot e Currently Selected The third line gives the same information for the currently selected events You can highlight a range of events by clicking at any point on the graphical display and dragging the mouse to the left or the right The third line shows information for the selected range e Selected Time The fourth and last line shows the exact timestamps of the first and last bytes in the currently selected range Note that this does not tell you the timestamp for the entire snapshot or the events displayed in the window just the highlighted events The raw timestamp value is the number of 100 nanosecond intervals since the beginning of January 1 1601 This is standard Windows time 92 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data A single mouse click places the cursor in the window The analyzer highlights all four signal changes in one color and uses a different color to specify the control signal line clicked on You c
189. scade Capture ele Close All Views Closes Open analysis windows Minimize Control When checked minimizing the Control window also Minimizes All minimizes all open analysis windows Frame Display and When these windows are open the menu will display these Event Display selections Clicking on the selection will bring that window to the front Control Window Help Menu Selections Live amp Help Topics Ki Opens the ComProbe Help window Capture Fil E About ComProbe Provides a pop up showing the version and release Protocol Analysis information Frontline contact information and copyright System information Support on the Web Ui Opens a browser to fte com technical support page 2 3 6 Minimizing Windows Windows can be minimized individually or as a group when the Control window is minimized To minimize windows as a group 1 Go to the Window menu on the Control window 2 Select Minimize Control Minimizes All The analyzer puts a check next to the menu item indicating that when the Control window is minimized all windows are minimized 3 Select the menu item again to deactivate this feature 4 The windows minimize to the top of the operating system Task Bar 46 Chapter 3 Configuration Settings In this section the ComProbe software is used to configure an analyzer for capturing data 3 1 USB I O Configuration 3 1 1 ComProbe USB Hardware Settings The Hardware Settings dialog is used to sel
190. splayed The core of each decoder is a program that defines how the protocol data is broken up into fields and displayed in the Frame Display window of the analyzer software This manual provides instruction on how to create and use custom decoders When reading the manual for the first time we encourage you to read the chapters in sequence The chapters are organized in such a way to introduce you to DecoderScript writing step by step Screenshots of the ComProbe protocol analyzer have been included in the manual to illustrate what you see on your own screen as you develop decoders But you should be aware for various reasons the examples may be slightly different from the ones that you create The differences could be the result of configuration differences or because you are running a newer version of the program Do not worry if an icon seems to be missing a font is different or even if the entire color scheme appears to have changed The examples are still valid Examples of decoders methods and frame recognizers are included in this manual You can cut and paste from these examples to create your own decoders A quick note here Usually the pasted code appears the same as the original in your editor Some editors however change the appearance of the text when it is pasted something to do with whether it is ASCII or Unicode text If you find that the pasted text does not appear the same as the original you can transfer the code into
191. t Ready DSR RS232 Data Terminal Ready DTR RS232 Carrier Detect CD RS232 Ring Indicator RI Click here to learn more about the Breakout Box and Pins 1 4 Searching for event where The first three options are all fairly similar and are described together These options are searching for an event where o One or more control signals changed o One or more control signals changed from off to on o One or more control signals changed from on to off Searching for an event where one or more signals changed means that the analyzer looks at every control signal that you checked and see if any one of those signals changed state at any time 105 Chapter 5 Navigating and Searching the Data ComProbe USB User Manual o If you want to look at just one control signal m Check the box for the signal m Uncheck all the other boxes m Choose to search for an event where one or more signals changed m The analyzer notes the state of the selected signal at the point in the buffer where the cursor is search the buffer and stop when it finds an event where RTS changed state m Ifthe end of the buffer is reached before an event is found the analyzer tells you that no matches were found e Searching for events where control signals changed state from off to on or vice versa is most useful if the signals are usually in one state and you want to search for occasions where they changed state For example O O O
192. t Support LE General Discoverg B AD Element Length 11 i AD Type Complete list off i G AD Data UUID Health Therma UUID Heart Rate Map UUID Blood Pressurg UUID Weight Scale i i UID Body Composilf CG AD Element Length 13 NI Total Frames 6 767 Frames Filtered In For Help Press F1 Advertiser Address 0x712500000 File Edit View Format Filter Bookmarks Options Window Help GAS YY Se n GF LP Li 4 LA LA GS li ki protocol tabs a DoE 8 Q 909 Find Errors LE BB m LE PKT LE ADY LE DATA LE LL L2CAP SMP ATT Data L File Edit View Format Filter Bookmarks Options Window Help a PHS YESZT apan A LA LA S la hin p Frame 1 Len 53 LE BB Header Length 13 Header Version 3 CP 1 Channel Index 37 2402 MHz Meets Predefined Filter Criteria for BT low energy devi Receive Status Received without errors Decryption Initiated No i Signal Strength 7 medium e PDU Length 37 B LE PKT 3 Preamble Oxaa Access Address Dx8e83bed6 CRC Oxfe96e6 LE ADY H PDU Type ADY_IND H Advertiser Address Type random be Payload Length 35 Advertiser Address Dx712500000002 B AD Data E AD Element Length 2 H AD Type Flags B AD Data H BR EDR Not Supported Yes i LE General Discoverable Mode Yes AD Element i Length 11 i AD Type Complete list of 16 bit UUIDs AD Data UUID Health Thermome
193. t frame look at the raw data shown under data in the detail pane on the frame display You may notice something that hints as to the profile in use e In addition look at some of the frames following the one in question The data may not be recognizable to the analyzer at the current point due to connection setup but might be discovered later on in the capture 3 2 2 0 USB Override Decode Information The Set Subsequent Decoder Parameters is a selection from the Options menu on the Frame Display dialog This option allows the user to override an existing parameter at any frame in the capture where the parameter is used If you have a parameter in effect and wish to change that parameter 1 Select the frame where the change should take effect 2 Select Set Subsequent Decoder Parameters from the Options menu Note You can also select a frame in the frame display right click to display a pop up H menu then select Set Subsequent Decoder Parameters 3 Select the rule you wish to modify from the list of rules 4 Choose the protocol the selected item carries from the drop down list 5 Click OK Each entry in the Set Subsequent Decoder Parameters dialog takes effect from the specified frame onward or until redefined in this dialog on a later frame Note If the capture has no user defined overrides then the system displays a dialog stating that H no user defined overrides exist 27 Chapter 4 Capturing and Analyzi
194. t to Send RTS Clear to Send CTS Data Set Ready DSR Data Terminal Ready DTR Carrier Detect CD and Ring Indicator Rl Click Find Next to locate the next occurrence of the search criteria or Find Previous to locate an earlier occurrence of the search criteria 106 ComProbe USB User Manual Chapter 5 Navigating and Searching the Data 5 1 7 Searching for Data Errors The analyzer can search for several types of data errors Searching for data error sallows you to choose which errors you want to search for and whether to search the DTE or DCE data or both Bytes with errors are shown in red in the Event Display window making it easy to find errors visually when looking through the data To access the search by time function 1 Opena capture file to search 2 Open the Event Display PD or Frame Display 5 window 3 Click on the Find icon AA or choose Find from the Edit menu 4 Click on the Errors tab of the Find dialog Note The tabs displayed on the Find dialog depend on the product you are running and the content Si of the capture file you are viewing J Find BPA500 cfa Decode Pattern Time Search for event where One or more of these changed a This exactly O One or more of these occured 7 AA we pate Find Previous C One or more of these was off Help Side Restriction il A Search without regard to data origin Search only these sides E Slave E Master Figur
195. t to use click on the Go To Move Forward or Move Backward buttons to start the search from the current event When you select Absolute as Search for Go To is available When you select Relative as Search for Move Forward or Move Backwardis available There are a couple of other concepts to understand in respect to searching with timestamps e The analyzer skips some special events that do not have timestamps such as frame markers Data events that do not have timestamps because timestamping was turned off either before or during capture are also skipped 100 ComProbe USB User Manual Chapter 5 Navigating and Searching the Data e Timestamping can be turned on and off while data is being captured As a result the capture buffer may have some data with a timestamp and some data without When doing a search by timestamp the analyzer ignores all data without a timestamp e The raw timestamp value is the number of 100 nanosecond intervals since the beginning of January 1 1601 This is standard Windows time 5 1 4 Using Go To Searching with Go To allows you to go to a particular frame or event or to move through the data X number of events or frames at a time You can move either forward or backwards through the data To access the Go To function 1 Opena capture file to search 2 Open the Event Display PD or Frame Display window 3 Click on the Find icon AA or choose Find from the Edit menu 4 Click on the Go To tab
196. tab displays all the non message items in the data AFCOMM signaling channel created The Ctrl Summary tab displays the signaling packets for all layers in one window in the order in which they are received The information in the colored boxes displays general information about the messaging The same is true for each one of the protocols If you want to see the all the messaging in one dialog you select the All Layers tab When you move the mouse over the message description you see an expanded tool tip If you position the cursor outside of the message box the tool tip will only display for a few seconds LMP timing accuracy req Address 1 Opcode LMP_max_slot Transaction ID Initiated by maste Max Slots 0x05 slots ot req Tran D Inittiated by slave If however you position the cursor within the tool tip box the message will remain until you move the cursor out of the box Additionally If you right click on a message description you will see the select Show all Layers button 79 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual yam NET When you select Show all Layers the chart will display all the messaging layers The Frame and Time of the packets are displayed on the left side of the chart Classic LE All Layers Ctrl Summary fNon Msg Summary BB L2CAP TCS LMP 13 45 10 21 4603 Setup Setup 13 45 10 219603 LT_ADDR 0 LLID L2C
197. tabs frames summary and events associated with that particular Bluetooth connection b Aspecific wireless or wired technology Displays all of the frames associated with e Classic Bluetooth e Bluetooth low energy e 802 11 e HCI A new Frame Display will open showing only the protocol tabs frames summary and events associated with the selected technology 4 4 1 13 1 Display Filters A display filter looks at frames that have already been captured It looks at every frame in the capture buffer and displays those that match the filter criteria Frames that do not match the filter criteria are not displayed Display filters allow a user to look at a subset of captured data without affecting the capture content There are three general classes of display filters e Protocol Filters e Named Filters e Quick Filter Protocol Filters Protocol filters test for the existence of a specific single layer The system creates a protocol filter for each decoder that is loaded if that layer is encountered in a capture session There are also three special purpose filters that are treated as protocol filters e All Frames with Errors e All Frames with Bookmarks e All Special Information Nodes Named Filters e Named filters test for anything other than simple single layer existence Named filters can be constructed that test for the existence of multiple layers field values in layers frame sizes etc as well as combinations of those things Na
198. ted or Not Present TET ino Errors LE BB Baseband LMP PreConnection FHS Bluetooth FHS L2CAP AMP Manager SDP OBEX FTP in CF 1 BAKA Non Captured Info i Channel Index 38 2426 MHz LE BB LE PKT LE ADY Meets Predefined Filter Criteria for BT low energy devices Receive Status Received without errors 802 11 Radio 802 11 MAC LLC 802 2 SNAP 802 11 AMP 802 1X L2CAP OBEX FTP Data pp Frame Display Connection Filter 802 11 All BTAmp80211FTPwLE cfa m o Se File Edit View Format Filter Bookmarks Options Window Help G Aa YE SS DI O MAS hh 3 No frame selected neo E 8 2 O D Find x A 13 yy Summary mo Ag CET ino Erors pa B Frame ASCII Hex Fram Delta Timestamp 3 E 1 660 109 00 00 41 1 4 10 2012 3 55 10 85203 E Figure 4 29 Connection Filter selecting All 802 11 frames front 4 4 1 13 3 Protocol Filtering from the Frame Display 4 4 1 13 3 1 Quick Filtering on a Protocol Layer On the Frame Display click the Quick Filtering icon NG or select Quick Filtering from the Filter menu This opens a dialog that lists all the protocols discovered so far The protocols displayed change depending on the data received 76 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Quick Filtering and Hiding Protocols Protocols To Filter In Protocols To Hide Named Filters All Frames With Errors AYDTP
199. ter JUD Heart Rate Monitor UUID Blood Pressure Monitor H UUID Weight Scale UUID Body Composition AD Element i Length 13 4 m r CEE Info Errors Filtered Data Set note protocol tabs DOES 6009 RR srry Data LE BB LE PKT LE ADY Data B Framet ASCII Hex Delta Timestamp 1 27 2015 10 02 04 6235 00 00 00 0 1 27 2015 10 02 04 6285 00 00 00 0 1 27 2015 10 02 04 6335 00 00 00 0 1 27 2015 10 02 04 6479 00 00 00 0 1 27 2015 10 02 04 6529 00 00 00 0 1 27 2015 10 02 04 6534 00 00 00 0 1 27 2015 10 02 04 6537 00 00 00 0 1 27 2015 10 02 04 6579 00 00 00 0 1 27 2015 10 02 04 6584 00 00 00 0 1 27 2015 10 02 04 6587 00 00 00 0 1 27 2015 10 02 04 6773 00 00 00 0 1 27 2015 10 02 04 6823 00 00 00 0 1 27 2015 10 02 04 6873 00 00 00 0 1 27 2015 10 02 04 6878 00 00 00 0 1 27 2015 10 02 04 6881 00 00 00 0 1 27 2015 10 02 04 7060 00 00 00 0 1 27 2015 10 02 04 7065 00 00 00 0 1 27 2015 10 02 04 7063 00 00 00 0 1 27 2015 10 02 04 7110 00 00 00 0 1 27 2015 10 02 04 7160 00 00 00 0 1 27 2015 10 02 04 7335 00 00 00 0 1 27 2015 10 02 04 7340 00 00 00 0 142772015 10 02 04 7344 00 00 00 0 142772015 10 02 04 7385 00 00 00 0 1 27 2015 10 02 04 7435 00 00 00 0 1 27 2015 10 02 04 7585 00 00 00 0 1 27 2015 10 02 04 7635 00 00 00 0 1 27 2015 10
200. ternal data monitoring The ComProbe USB protocol analyzer is a high speed full soeed and low speed USB 2 0 system that captures and sends data to the analysis PC over a high speed USB 2 0 connection The front of the analyzer has three USB connections one for the device being tested one for the PC the device being tested is normally connected to and one digital I O port Figure 2 1 Figure 2 1 ComProbe USB Front Panel The back panel has one USB connection labeled Analysis PC for connecting the ComProbe USB hardware to the computer running ComProbe software Figure 2 2 ComProbe USB User Manual Chapter 2 Getting Started Figure 2 2 ComProbe USB Back Panel There are three LED s on top of the ComProbe Figure 2 3 Figure 2 3 ComProbe USB Top LEDs e The orange LED TST serves as a Capture Port connection indicator It glows when the Target Host is connected e The red LED ACT indicates bus activity e The yellow LED PWR serves as an Analysis Port connection indicator The PWR LED will be illuminated when the analyzer has been correctly connected to the analysis computer and is receiving power from the USB The Capture side also includes a mini DIN 9 connector which serves as a connection to the digital inputs and outputs Figure 2 4 Its pin outs and the cable coloring for the included cable are described in Figure 2 4 and Table 2 1 below Figure 2 4 mini DIN Connector Pin Location Table 2 1 m
201. than that are not guaranteed to be interpreted correctly by the analyzer Also only one digital input event may occur per active packet All other digital input events can only be handled after the packet has finished Digital inputs although guaranteed to have the correct timestamp given the previous conditions may be presented out of order because they are provided randomly by the user and have no direct correlation to the bus It is important to note that the digital inputs are susceptible to cross talk if they are not being actively driven This could occur if a digital input has been enabled but has not been tied to a signal Any other nearby signal i e other digital inputs or outputs could cause the input to activate We recommend that all undriven digital inputs be disabled or tied to ground Note The raw timestamp value is the number of 100 nanosecond intervals since the beginning of H January 1 1601 This is standard Windows time 4 Selectone or more of the Digital Input Enabling Options Digital Output Configuration 5 Click the Configure button to set the output configuration 6 Select OK to close the dialog 3 1 3 USB I O Settings Digital Output Configuration Digital outputs provide a means for users to output certain events to other devices such as oscilloscopes In this way users can synchronize events on the bus with other signals they may be measuring 19 ComProbe USB User Manual Chapter 3 Configuration Se
202. the Frame Display windows Note The OK button on the Set Condition dialog box is unavailable grayed out until the condition selections are complete Renaming a Display Filter 1 Select Rename Display Filters from the Filter menu in the Frame Display window to open the Rename Filter dialog The system displays the Rename Filter dialog with a list of all user defined filters in the Filters combo box 70 ComProbe USB User Manual Chapter 4 Capturing and Analyzing Data Rename Filters Filters Filter0 Description Indude each frame where the protocol Baseband field LT ADDR Is Equal To 6 New Name Filter0 1 Apply Figure 4 22 Rename Filters Dialog 2 Select the filter to be renamed from the combo box 3 Enter anew name for the filter in the New Name box Optionally click the Apply button and the new name will appear in the Filters combo box and the New Name box will empty This option allows you to rename several filters without closing the Rename Filter dialog each time 4 Click OK The Rename Filter dialog box closes and the system renames the filter 4 4 1 13 2 Connection Filtering Connection Filtering allows the user to view a subset of the total available packets within the Frame Display The subset can include data from a single Bluetooth connection or all of the BR EDR packets all of the low energy packets all of the 802 11 packets or all of the HCI packets
203. the layer that is selected in the Message Sequence Chart the properties of the printer you select and the amount of data in the layer which will correspond to the number of pages displayed You control what you see and when to print using the toolbar at the top of the dialog BROAN Puc jos KAB DIE sav Figure 4 42 Print Preview Toolbar Table 4 5 Print Preview Icons Prints all the pages to the printer you select in Print Setup dialog When you select Print you will output the data that is currently being displayed 85 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual Table 4 5 Print Preview Icons Continued Name Description Zoom In Horizontially Expands the data horizontally so it can be easier to read Zoom Out Horizontally Squeezes the data together so that more fits on one page Zoom In Vertically Expands the data vertically so it can be easier to read Zoom Out Vertically Squeezes the data so that more fits on one page Current Page The current page text box displays the Page of page number this is currently shown in the dialog You can enter a number in the text box then press Enter and the dialog will display the data for that page K lt gt D aaa kalma rar ar e The first page e The previous page e The next page e Thelast page Close Print Preview Closes the dialog and returns to the Message Sequence Chart Select Font Size Allows selection of the print font size
204. time and may cause the analyzer to lose data while the window is being updated Some windows require more processing time than others because the information being displayed in them is constantly changing Refrain from displaying data live in the Event Display and Frame Display windows The analyzer can capture data with no windows other than the Control window open 133 ComProbe USB User Manual Chapter 7 General Information e If you are still experiencing buffer overflows after trying all of the above options then you need to use a faster PC 7 2 2 BTSnoop File Format Overview The BTSnoop file format is suitable for storing Bluetooth HCI traffic It closely resembles the snoop format as documented in RFC 1761 File Format The snoop packet capture file is an array of octets structured as follows File Header Packet Record Number 1 Packet Record Number 2 Packet Number N The File Header is a fixed length field containing general information about the packet file and the format of the packet records it contains One or more variable length Packet Record fields follow the File Header field Each Packet Record field holds the data of one captured packet File Header The structure of the File Header is as follows Identification Pattern Version Number 1 Datalink Type Identification Pattern A 64 bit 8 octet pattern used to identify the file as a snoop packet capture file Th
205. top NPC Wifi Save as type CSW File cs r Event range Side All Selection Both HME DCE 1 to 2000 Events Per How CS Headers Multiple Events Per Row No Timestamps E Show Preamble One Event Per Row Show Timestamp3 Show Column Headings Help Cancel Save Figure 6 4 Event Display Export Example csv file How to Export Event Display Data to a File 1 Select Export Events from the File menu on the Event Display window to display the Event Display Export dialog 2 Enter a file path and name or click the browser button to display the Windows Save As dialog and navigate to the desired storage location 3 Selecta file type from the Save as type drop down List Menu on the Event Display Export dialog Select from among the following file formats Text File txt CSV File csv HTML File html Binary File bin 4 Select the range of events to include in the file from either All or Selection in the Event Range section of the Event Display Export dialog e Selecting more than one event in the Event Display window defaults the radio button in the Event Display Export dialog to Selection and allows the user to choose the All radio button e When only one event is selected something must be selected the All radio button in the Event Display Export dialog is selected by default 5 Next you need to select the Side variable for serial communications e Side is used to determine w
206. tract Data Audio dialog a MSC Chart Opens the Message Sequence Chart Signal Display Opens The Signal Display dialog 2 3 2 Configuration Information on the Control Window i Cascade Arranges windows in a cascaded display The Configuration bar just below the toolbar displays the hardware configuration and may include I O settings It also provides such things as name of the network card address information ports in use etc 2 3 3 Status Information on the Control Window The Status bar located just below the Configuration bar on the Control window provides a quick look at current activity in the analyzer o Not Active means that the analyzer is not currently capturing data o Paused means that data capture has been suspended o Running means that the analyzer is actively capturing data e Used The next item shows how much of the buffer or capture file has been filled For example if you are capturing to disk and have specified a 200 Kb capture file the bar graph tells you how much of the capture file has been used When the graph reaches 100 capture either stops or the file begins to overwrite the oldest data depending on the choices you made in the System Settings e Utilization Events The second half of the status bar gives the current utilization and total number of events seen on the network This is the total number of events monitored not the total number of events captured The analyzer is always monitoring
207. ts to a CFA file These comments can be used for many purposes For example you can list the setup used to create the capture file record why the file is useful to keep or include notes to another person detailing which frames to look at and why Bookmarks are another useful way to record information about individual frames To open the Notes window 1 Click the Show Notes icon FE This icon is present on the toolbars of the Frame Display rag as well as the Event Display po Notes can be selected from the Edit menu on one of these windows 2 Type your comments in the large edit box on the Notes window The Cut Copy Paste features are K Fs B are all supported from Edit menu and the toolbar 2 C at the current cursor location supported from Edit menu and the toolbar when text is selected Undo and Redo features 3 Click the thumbtack icon to keep the Notes window on top of any other windows 4 When you re done adding comments close the window 5 When you close the capture file you are asked to confirm the changes to the capture file See Confirming Capture File CFA Changes for more information 6 2 Confirm Capture File CFA Changes This dialog appears when you close a capture file after changing the Notes the protocol stack or bookmarks The dialog lists information that was added or changed and allows you to select which information to save and whether to save it to the current file or to a new one 114
208. ttings Configure Digital Output Lines Line Green Enabled Line 1 vill be asserted while the capture is rune Line 2 Blue Enabled Line 2 vill be asserted when a packet E debecbed on the bus Line 3 Purple Enabled Line 3 will be accerted when the selected PID device address and endpoint masch Line 4 Gray Enabled Line 4 vill be asserted when the selected data FED and pattem device address and encipaint match NOTE Enter device address endpoint and data pattern in hexadecimal An exame for Format of data pattern bs Al 2801 or Al 26 01 Figure 3 3 Configure Digital Output Lines There are four digital outputs that are user configurable Each output has the option of being Enabled Disabled Active High voltage or Active Low voltage Active High Disabled Furthermore each output can activate on specific conditions fevers 1 Digital Output 1 Green asserted whenever the capture is running Select Enabled Disabled Active High voltage or Active Low voltage 2 Digital Output 2 Blue asserted whenever a packet is detected on the bus Select Enabled Disabled Active High voltage or Active Low voltage 3 Digital Output 3 Purple asserted whenever a packet matches the PID Device Address and Endpoint values that you select Select Enable Active High voltage or Active Low voltage for Line 3 a PID The PID is the first byte of valid data sent across the bus and it enc
209. uffer overflow errors are an indicator that the analyzer is unable to keep up with the data The information below describes what happens to the data as it arrives what the error means and how various aspects of the analyzer affect performance Also included are suggestions on how to improve performance The analyzer s driver takes data from the driver and counts each byte as they are put into the driver s buffer The analyzer s driver tells the user interface that data is ready to be processed The analyzer takes the data from the driver s buffer and puts the data into the capture buffer Driver Buffer Overflows occur when the user interface does not retrieve frames from the driver quickly enough Buffer overflows are indicated in the Event Display window by a plus sign within a circle Clicking on the buffer overflow symbol displays how many frames have been lost There are several things that you can do to try and solve this problem 89 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual e Use capture filters to filter out data you don t need to see Capture filters reduce the amount of data processed by the analyzer Ethernet Only e Close all other programs that are doing work while the analyzer is running Refrain from doing searches in the Event Display window or other processor intensive activities while the analyzer is capturing data e Timestamping takes up processor time primarily not in timestamping the d
210. ult is highlight in the Message Sequence Chart 3P AFCOMM OBEX BIP FIP profile created jm J Profile BIP Type x bijimg capabilities Figure 4 40 Highlighted First Search Result If there is no instance of the search value you see this following dialog Once you have set the search value you can 1 use the Search Previous aa A The marraga Abort ves not Found and Search Next Ha buttons or 2 F2 and F4 to move to the next or previous frame in the chart 4 4 2 2 Message Sequence Chart Go To Frame The Message Sequence Chart has a Go To Frame function that makes it easy to find a specific frame within the layers In addition to Search you can also locate specific frames by clicking on the Go To Frame FI toolbar icon TU 000 1 Click Go To Frame in the toolbar boo Enter frame number fx 2 Enter aframe number in the Enter frame No text box 3 Click OK 83 Chapter 4 Capturing and Analyzing Data ComProbe USB User Manual The Go To Frame dialog disappears and the selected frame is highlighted in the chart Once you have identified the frame in Go To you can 1 use the Search Previous a and Search Next i buttons or 2 F2 and F4 keys to move to the next or previous frame in the chart 4 4 2 3 Message Sequence Chart First Error Frame When you select Go to first error frame from the toolbar X the Select layer dialog appears Select layer Select layer 42DP
211. ust be entered in Hexadecimal The range is O F 4 Digital Output 4 Gray asserted whenever a packet matches the PID Data Pattern Device Address and Endpoint values that you set Select Enable Active High voltage or Active Low voltage for Line 4 a PID Select Don t Care Is Equal to or Is Not Equal to from the PID drop down list e If you select Is Equal to or Is Not Equal to for line 3 choose a Packet Identifier PID value from the drop down list e The PID may be followed by anywhere from O to 1026 bytes depending on the packet type The PID byte is self checking in order for the PID to be valid the last 4 bits must be a one s complement of the first 4 bits If a received PID fails its check the remainder of the packet will be ignored by the USB device b Device Address Select Don t Care Is Equal to or Is Not Equal to from the drop down list for the Device Address e lf you select Is Equal to or Is Not Equal to enter a value for the Device Address e The Device Address must be entered in Hexadecimal The range is 00 7F c Endpoint The endpoint is the fundamental unit of communication in USB All data is transferred through virtual pipes between the host and these endpoints All communication between a USB host and a USB device is addressed to a specific endpoint on the device Each device endpoint is a unidirectional receiver or transmitter of data either specified as a sender or receiver of data from the host Se
212. vice can result in ComProbe hardware capturing data from the device not the DUT ComProbe USB User Manual Chapter 2 Getting Started e The Analysis computer cable must be no longer than 5 meters 15 feet e The combined length of the Test Computer and the DUT cables must not exceed 3 meters 9 feet A greater length could result in an abnormally high error rate on the bus being analyzed 2 1 2 2 Connecting More Than One Device Under Test USB analyzers are able to analyze traffic coming only from devices connected under them If a device is connected above the analyzer it will only register data packets coming from the host Figure 2 6 shows an incorrect connection the USB mouse is connected above the analyzer Test Computer Analysis computer Device Under Test Figure 2 6 Wrong Connection With More Than One Device Under Test Figure 2 7 illustrates how to connect correctly several devices under test When the ComProbe analyzer is used to capture data from multiple devices this analysis must necessarily involve a USB hub In this way you can ensure that all the devices to be analyzed are in fact below the ComProbe analyzer You should be aware that the analyzer will record all hub and devices traffic Though it could result in a large amount of data this volume of data will not cause inconvenience because the ComProbe software s functions can filter out extra traffic very easily Test Computer Analysis computer USB
213. w will open configured to the selected capture method S Note If you don t need to identify a capture method then click the Run button to start the analyzer Creating a Shortcut A checkbox labeled Create Shortcut When Run is located near the bottom of the dialog This box is un checked by default Select this checkbox and the system creates a shortcut for the selected method and places it in the Frontline ComProbe Protocol Analysis System lt version gt desktop folder and in the start menu when you click the Run button This function allows you the option to create a shortcut icon that can be placed on the desktop In the future simply double click the shortcut to start the analyzer in the associated protocol Supporting Documentation The Frontline ComProbe Protocol Analysis System directory contains supporting documentation for development Automation DecoderScript application notes user documentation Quick Start Guides and User Manual and maintenance tools Chapter 2 Getting Started ComProbe USB User Manual 2 2 2 ComProbe USB Data Capture Methods B Sriifing USB Sniffing 43 Bluetooth HCI 43 USE E Virtual Sniffing 4 amp 3 FTS Side C3 IEEE11073 Connected Devices e Bluetooth HCI o Requires one USB ComProbe II hardware o Captures and decodes Bluetooth data USB and USB Setup data will be filtered out e USB ComProbe Il USB o Requires one USB ComProbe Il hardware o Captures and decodes U
214. y and using a right click menu When you create a Name Filter it appears in the Quick Filtering dialog where you can use it do customize the data you see in the Frame Display panes 1 Select a frame in the Frame Display Summary Pane 2 Right click in the one of the data columns in the Summary Pane CRC NESN DS Packet Success Ethertype Source Address etc 3 Select Filter in data type The Filtering Results Filtering Results dialog appears 4 Enter aname for the filter 5 Select OK Filter Name The filter you just created appears in the Named Filters section ASCII 3 of the Quick Filtering dialog ok Cancel 441 413 1 4 Using Compound Display Filters Compound filters use boolean logic to create complex and precise filters There are three primary Boolean logic operators AND OR and NOT The AND operator narrows the filter the OR operator broadens the filter and the NOT operator excludes conditions from the filtered results Include parentheses in a compound filter to nest condition sets within larger condition sets and force the filter processing order There are two steps to using a compound filter Define the filter conditions and then apply the filter to the data set The analyzer combines both filter definition and application in one dialog 1 Click the Display Filters icon Y on the Frame Display window or select Apply Modify Display Filters from the filter menu to open the Set Condit
215. zing Byte Level Data _ 22 2 lee eee cecc ce e cece cece eee eee eeeeeeeeeeeees 33 4 3 1 Event Display 0 220 a 33 4 3 2 The Event Display Toolbar 2 2 eee eee ce cee ce cece cee eee cence ence aooaa 34 4 3 3 Opening Multiple Event Display Windows 22 a 36 4 3 4 Calculating CRCs or FCSs _ 22 22 ieee cc cece cee ce eee cece eee e eee eceeeeeeeeeeeeees 36 4 3 5 Calculating Delta Times and Data Rates _ 22 22 lec ec ccc eee cece cece eee eceeeeeeeeees 36 4 3 6 Switching Between Live Update and Review Mode 22 222 c cece cece e cece eee ee eeeeees 37 4 3 7 Data Formats and Symbols 22 220 e cee eee eee cece cee cece eee eeeeeeceeceeceeceeeceees 37 4 3 7 1 Switching Between Viewing All Events and Viewing Data Events 37 4 3 7 2 Switching Between Hex Decimal Octal or Binary 2 20 2 e eee eee eee cece ee eeeeees 38 4 3 7 3 Switching Between ASCII EBCDIC and Baudot 2 22 ieee ee ee cece eee eee 39 4 3 7 4 Selecting Mixed Channel Sides 0 cece cece cece cece cece eee cecececececeeeeeceeeeees 39 43 7 Listof all EVENUSVIMDOIS Hana ma napud ADAN sana Na KZ GAO NDES AJA BEL LST kad hk LG ves detedevacctweredad 40 ComProbe USB User Manual Al ed OOM AA PA 41 4 4 Analyzing Protocol Decodes 2 eee cece cece cece cece cece cece cece eceeceececeececeeceeeeeeees 42 AAA Frame Display WINdOW o c26ccu

ComProbe USB User Manual - Frontline Test Equipment

Contents

Download Pdf Manuals

Related Search

Related Contents