I’m retrieving bug-report HCI snoop logs from my android 15 cell phone after my cellphone app sends chunks of knowledge through BLE to a different BLE system (system 2). Then viewing the logs in Wireshark.
The info is transferred by the HCI as ‘Write Command’ ATT frames which include a 12 byte header and a 136 byte payload (starting with b1 b1).
As soon as a number of of the Write instructions are despatched, the controller responds to the host with a ‘Variety of Accomplished Packets’ HCI_EVT body.
The issue I’m having is that my payloads are being corrupted once I ‘print’ them at utility layer on system 2 (all the time the final 16 bytes of the primary corrupted payload after which all bytes of any subsequent payloads). The ultimate 16 bytes of body 42 (see logs at backside of query) is the primary place that corruption occurs.
I’ve no approach to view HCI logs on the system 2 finish. And presently no approach to sniff the info over the BLE connection.
I’ve seen that on the time of corruption, the Variety of Accomplished Packets doesn’t replicate the variety of Write Instructions despatched beforehand. You may see at body 44 of the logs the controller studies that just one packet has accomplished, regardless that 3 have been despatched consecutively. The controller then catches up at body 47 and studies that 4 packets have accomplished.
Questions:
- Might this delay between the write instructions and the finished packets response be the reason for my corruption i.e. the host is bombarding the controller with packets quicker than it may well ship them on? Or is it extra prone to be a symptom of an issue with the BLE stack and so forth?
- I’ve seen that the Dynamically Allotted Channel within the Connection oriented channel frames (body 45) appears to alter very incessantly (roughly each 2-5 write instructions it can increment by 0x0100). Is that this regular? I seen this does not occur with my android 13 cellphone (and in addition no corruption with android 13 telephones).
- Does every other a part of these logs soar out as being non-standard or regarding?
Thanks on your assist.
Body 41: 148 bytes on wire (1184 bits), 148 bytes captured (1184 bits)
Encapsulation sort: Bluetooth H4 with linux header (99)
Arrival Time: Aug 19, 2025 15:11:22.690757000 GMT Daylight Time
UTC Arrival Time: Aug 19, 2025 14:11:22.690757000 UTC
Epoch Arrival Time: 1755612682.690757000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.006802000 seconds]
[Time delta from previous displayed frame: 0.006802000 seconds]
[Time since reference or first frame: 1.338975000 seconds]
Body Quantity: 41
Body Size: 148 bytes (1184 bits)
Seize Size: 148 bytes (1184 bits)
[Frame is marked: False]
[Frame is ignored: False]
Level-to-Level Path: Despatched (0)
[Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
[Coloring Rule Name: Write Command]
[Coloring Rule String: btatt.opcode == 0x52]
Bluetooth
[Source: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)]
Bluetooth HCI H4
[Direction: Sent (0x00)]
HCI Packet Sort: ACL Knowledge (0x02)
Bluetooth HCI ACL Packet
.... 0000 0000 0101 = Connection Deal with: 0x005
..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
00.. .... .... .... = BC Flag: Level-To-Level (0)
Knowledge Whole Size: 143
Knowledge
[Expert Info (Error/Protocol): Frame is out of any "connection handle" session]
[Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Source Device Name: ]
[Source Role: Unknown (0)]
[Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination Device Name: ]
[Destination Role: Unknown (0)]
[Current Mode: Unknown (-1)]
Bluetooth L2CAP Protocol
Size: 139
CID: Attribute Protocol (0x0004)
Bluetooth Attribute Protocol
[Expert Info (Warning/Protocol): Packet size exceed current ATT_MTU]
Opcode: Write Command (0x52)
Deal with: 0x0013 (Unknown)
Worth […]: b1b18000000000008cc66e6c588f0000faa19132916001ec20a1f42f00000000629384000080a0e1d81f0402c7a1462693eaff1f4e634712208112208684ce4147e30fd40c1c40edef8226061bf901f111eccf032061143046221501efdbc600c0346e0c1080e0ee660c044e420c671cef
Body 42: 148 bytes on wire (1184 bits), 148 bytes captured (1184 bits)
Encapsulation sort: Bluetooth H4 with linux header (99)
Arrival Time: Aug 19, 2025 15:11:22.776272000 GMT Daylight Time
UTC Arrival Time: Aug 19, 2025 14:11:22.776272000 UTC
Epoch Arrival Time: 1755612682.776272000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.085515000 seconds]
[Time delta from previous displayed frame: 0.085515000 seconds]
[Time since reference or first frame: 1.424490000 seconds]
Body Quantity: 42
Body Size: 148 bytes (1184 bits)
Seize Size: 148 bytes (1184 bits)
[Frame is marked: False]
[Frame is ignored: False]
Level-to-Level Path: Despatched (0)
[Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
[Coloring Rule Name: Write Command]
[Coloring Rule String: btatt.opcode == 0x52]
Bluetooth
[Source: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)]
Bluetooth HCI H4
[Direction: Sent (0x00)]
HCI Packet Sort: ACL Knowledge (0x02)
Bluetooth HCI ACL Packet
.... 0000 0000 0101 = Connection Deal with: 0x005
..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
00.. .... .... .... = BC Flag: Level-To-Level (0)
Knowledge Whole Size: 143
Knowledge
[Expert Info (Error/Protocol): Frame is out of any "connection handle" session]
[Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Source Device Name: ]
[Source Role: Unknown (0)]
[Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination Device Name: ]
[Destination Role: Unknown (0)]
[Current Mode: Unknown (-1)]
Bluetooth L2CAP Protocol
Size: 139
CID: Attribute Protocol (0x0004)
Bluetooth Attribute Protocol
[Expert Info (Warning/Protocol): Packet size exceed current ATT_MTU]
Opcode: Write Command (0x52)
Deal with: 0x0013 (Unknown)
Worth […]: b1b18000000000005320291e52c0288c28142aa2ca8432f073c0091e7220088c2814baa40282e0efef81260652f0ef610088629846a28c02d81f8c00f80400046e2cbaa60080e1e9dbfa468024321400208c2003388518046e2c2aa06293840086a40e84019020eac6511b0b27254e22c8
Body 43: 148 bytes on wire (1184 bits), 148 bytes captured (1184 bits)
Encapsulation sort: Bluetooth H4 with linux header (99)
Arrival Time: Aug 19, 2025 15:11:22.860785000 GMT Daylight Time
UTC Arrival Time: Aug 19, 2025 14:11:22.860785000 UTC
Epoch Arrival Time: 1755612682.860785000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.084513000 seconds]
[Time delta from previous displayed frame: 0.084513000 seconds]
[Time since reference or first frame: 1.509003000 seconds]
Body Quantity: 43
Body Size: 148 bytes (1184 bits)
Seize Size: 148 bytes (1184 bits)
[Frame is marked: False]
[Frame is ignored: False]
Level-to-Level Path: Despatched (0)
[Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
[Coloring Rule Name: Write Command]
[Coloring Rule String: btatt.opcode == 0x52]
Bluetooth
[Source: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)]
Bluetooth HCI H4
[Direction: Sent (0x00)]
HCI Packet Sort: ACL Knowledge (0x02)
Bluetooth HCI ACL Packet
.... 0000 0000 0101 = Connection Deal with: 0x005
..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
00.. .... .... .... = BC Flag: Level-To-Level (0)
Knowledge Whole Size: 143
Knowledge
[Expert Info (Error/Protocol): Frame is out of any "connection handle" session]
[Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Source Device Name: ]
[Source Role: Unknown (0)]
[Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination Device Name: ]
[Destination Role: Unknown (0)]
[Current Mode: Unknown (-1)]
Bluetooth L2CAP Protocol
Size: 139
CID: Attribute Protocol (0x0004)
Bluetooth Attribute Protocol
[Expert Info (Warning/Protocol): Packet size exceed current ATT_MTU]
Opcode: Write Command (0x52)
Deal with: 0x0013 (Unknown)
Worth […]: b1b1800000000000d84801007a42a6ec9884e238ca623210002032f08000ef616238c6800080c0ef2402100046b260ee2605c6153aaba6244710d201a8c4600269c108028081c0e346f08c876e6c08643aa7dbf224321802582f0400eaa48c026e0c8a452080e0ec02840080840e002562
Body 44: 8 bytes on wire (64 bits), 8 bytes captured (64 bits)
Encapsulation sort: Bluetooth H4 with linux header (99)
Arrival Time: Aug 19, 2025 15:11:22.864229000 GMT Daylight Time
UTC Arrival Time: Aug 19, 2025 14:11:22.864229000 UTC
Epoch Arrival Time: 1755612682.864229000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.003444000 seconds]
[Time delta from previous displayed frame: 0.003444000 seconds]
[Time since reference or first frame: 1.512447000 seconds]
Body Quantity: 44
Body Size: 8 bytes (64 bits)
Seize Size: 8 bytes (64 bits)
[Frame is marked: False]
[Frame is ignored: False]
Level-to-Level Path: Obtained (1)
[Protocols in frame: bluetooth:hci_h4:bthci_evt]
[Coloring Rule Name: bthci_evt]
[Coloring Rule String: bthci_evt]
Bluetooth
[Source: controller]
[Destination: host]
Bluetooth HCI H4
[Direction: Rcvd (0x01)]
HCI Packet Sort: HCI Occasion (0x04)
Bluetooth HCI Occasion - Variety of Accomplished Packets
Occasion Code: Variety of Accomplished Packets (0x13)
Parameter Whole Size: 5
Variety of Connection Handles: 1
Connection Deal with: 0x8005
Variety of Accomplished Packets: 1
Body 45: 496 bytes on wire (3968 bits), 496 bytes captured (3968 bits)
Encapsulation sort: Bluetooth H4 with linux header (99)
Arrival Time: Aug 19, 2025 15:11:22.865584000 GMT Daylight Time
UTC Arrival Time: Aug 19, 2025 14:11:22.865584000 UTC
Epoch Arrival Time: 1755612682.865584000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.001355000 seconds]
[Time delta from previous displayed frame: 0.001355000 seconds]
[Time since reference or first frame: 1.513802000 seconds]
Body Quantity: 45
Body Size: 496 bytes (3968 bits)
Seize Size: 496 bytes (3968 bits)
[Frame is marked: False]
[Frame is ignored: False]
Level-to-Level Path: Obtained (1)
[Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap]
Bluetooth
[Source: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)]
Bluetooth HCI H4
[Direction: Rcvd (0x01)]
HCI Packet Sort: ACL Knowledge (0x02)
Bluetooth HCI ACL Packet
.... 1110 1101 1100 = Connection Deal with: 0xedc
..10 .... .... .... = PB Flag: First Robotically Flushable Packet (2)
00.. .... .... .... = BC Flag: Level-To-Level (0)
Knowledge Whole Size: 491
Knowledge
[Expert Info (Error/Protocol): Frame is out of any "connection handle" session]
[Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Source Device Name: ]
[Source Role: Unknown (0)]
[Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination Device Name: ]
[Destination Role: Unknown (0)]
[Current Mode: Unknown (-1)]
Bluetooth L2CAP Protocol
Size: 487
CID: Dynamically Allotted Channel (0x5bff)
Payload […]: 0019000001007eea5b60db014340df5965059f65052e0a86658c019c4348df89601e011e431ce086601e011e4324e089322601264348e086322601264360e05965059f65052f0a86658c019c4368e0883226012686322601264374e086321e01264398e089601e011643e8e086601e01
Body 46: 148 bytes on wire (1184 bits), 148 bytes captured (1184 bits)
Encapsulation sort: Bluetooth H4 with linux header (99)
Arrival Time: Aug 19, 2025 15:11:22.942814000 GMT Daylight Time
UTC Arrival Time: Aug 19, 2025 14:11:22.942814000 UTC
Epoch Arrival Time: 1755612682.942814000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.077230000 seconds]
[Time delta from previous displayed frame: 0.077230000 seconds]
[Time since reference or first frame: 1.591032000 seconds]
Body Quantity: 46
Body Size: 148 bytes (1184 bits)
Seize Size: 148 bytes (1184 bits)
[Frame is marked: False]
[Frame is ignored: False]
Level-to-Level Path: Despatched (0)
[Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
[Coloring Rule Name: Write Command]
[Coloring Rule String: btatt.opcode == 0x52]
Bluetooth
[Source: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)]
Bluetooth HCI H4
[Direction: Sent (0x00)]
HCI Packet Sort: ACL Knowledge (0x02)
Bluetooth HCI ACL Packet
.... 0000 0000 0101 = Connection Deal with: 0x005
..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
00.. .... .... .... = BC Flag: Level-To-Level (0)
Knowledge Whole Size: 143
Knowledge
[Expert Info (Error/Protocol): Frame is out of any "connection handle" session]
[Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Source Device Name: ]
[Source Role: Unknown (0)]
[Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
[Destination Device Name: ]
[Destination Role: Unknown (0)]
[Current Mode: Unknown (-1)]
Bluetooth L2CAP Protocol
Size: 139
CID: Attribute Protocol (0x0004)
Bluetooth Attribute Protocol
[Expert Info (Warning/Protocol): Packet size exceed current ATT_MTU]
Opcode: Write Command (0x52)
Deal with: 0x0013 (Unknown)
Worth […]: b1b1800000000000d80f0802f754bc0112b42510f771efa111e038002af2f60f6ac1880f000010e1e64afc0f004000000000000000000000000000000000000000000000000000006ee901026ce8010228800004b21a12010d70d0822289d20193030570000000ef0d90930ea35351b292
Body 47: 8 bytes on wire (64 bits), 8 bytes captured (64 bits)
Encapsulation sort: Bluetooth H4 with linux header (99)
Arrival Time: Aug 19, 2025 15:11:22.956493000 GMT Daylight Time
UTC Arrival Time: Aug 19, 2025 14:11:22.956493000 UTC
Epoch Arrival Time: 1755612682.956493000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.013679000 seconds]
[Time delta from previous displayed frame: 0.013679000 seconds]
[Time since reference or first frame: 1.604711000 seconds]
Body Quantity: 47
Body Size: 8 bytes (64 bits)
Seize Size: 8 bytes (64 bits)
[Frame is marked: False]
[Frame is ignored: False]
Level-to-Level Path: Obtained (1)
[Protocols in frame: bluetooth:hci_h4:bthci_evt]
[Coloring Rule Name: bthci_evt]
[Coloring Rule String: bthci_evt]
Bluetooth
[Source: controller]
[Destination: host]
Bluetooth HCI H4
[Direction: Rcvd (0x01)]
HCI Packet Sort: HCI Occasion (0x04)
Bluetooth HCI Occasion - Variety of Accomplished Packets
Occasion Code: Variety of Accomplished Packets (0x13)
Parameter Whole Size: 5
Variety of Connection Handles: 1
Connection Deal with: 0x8005
Variety of Accomplished Packets: 4