[Bluez-devel] Ethereal support for bluetooth, developer needs sample captures

[Bluez-devel] Ethereal support for bluetooth, developer needs sample captures

[ronnie sahlberg]

List,
Posting to devel since you guys are probably more interested in
protocol dissection support in ethereal than regular users.

Im Ronnie sahlberg, one of the developers of ethereal.
By request of some users I have found an old patch by Christoph Scholz
to ethereal for a dissector he wrote for the bluetooth stack in 2002.


Christoph's email address unfortunately does not work now after 4 years :-(


Since the patch is 4 years old it does not apply to ethereal svn any
more  since too many internal APIs have changed.
I am however massaging and refactoring it for inclusion and have
included some of the protocol stack into ethereal already.

Ethereal reads the files generated by some tool called 'hcidump' (i am
not a bluetooth guy,   im a san/nas guy  so im not read up on your
tools)

I am currently refactoring the L2CAP layer and would really benefit
from having some more example captures to work and verify with before
i check this layer in.

In particular I am looking for L2CAP captures containing command
packets with InformationRequest/Response, and connectionless reception
channel packets.
I would also like some captures where the ACL layer contains L2CAP
pdus   that are fragmented across several ACL packets and a
description on how the fragmentation works for bt.


This is to start with, to proceed even further I would really benefit
from having as many and as large captures as possible to verify with.
The more the merrier.


Anyone that can provide captures with these kind of packets, and who
want me to refactor the patch so that it can all go into mainline
ethereal,   PLEASE send me such hcidump captures.



best regards
ronnie sahlberg

(I am not subscribed to this list since i am not really that
interested in bluetooth   but it is a shame to let this patch diverge
more than it already has  and support for bt would benefit some users.

Please send me as many hcidump captures as possible.   please.   thanks)


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Bluez-devel mailing list
Bluez-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-devel

Re: [Bluez-devel] Ethereal support for bluetooth, developer needs sample captures

[Ruud Beukema]

[-- Attachment #1: Type: text/plain, Size: 3862 bytes --]


Hi Ronnie,

For my internship here at Wireless Value (Netherlands) I written a
program which I call 'hcimon'. With this program I can capture BCSP/HCI
communication externally between a BlueCore and its host.

The HCI communication (all ACL data, COMMAND/EVENT packets and LINK
ESTABLISHMENT packets, yet no SCO data) is logged in a file in a format
that can be reread by hcidump in order get a more human readable
interpretation of the captured bytes.

In order to have a captured HCI message interpreted by hcidump it needs
to be preceded with a 12 byte hciheader and a packet type byte (so a
total of 13 byte header). This is exactly what my program does.

So, to keep it short: I've logged a lot of things now so I have enough
HCI-log files in a hcidump file format. It MAY be slightly different
from an official hcidump file; for example I don't know what the PAD
byte in the hcidump-header is used for, so I fill this byte with 0x00
since I've seen a lot of official hcidump files doing that. Nevertheless
I use them for debugging without problems.

I have about 6 good hcilog files ranging in size from 30 MB to 350 MB. I
may be able to upload them to some server space if you want.

Let me know!

Ruud

On Mon, 2006-05-15 at 10:13 +0000, ronnie sahlberg wrote:

> List,
> Posting to devel since you guys are probably more interested in
> protocol dissection support in ethereal than regular users.
> 
> Im Ronnie sahlberg, one of the developers of ethereal.
> By request of some users I have found an old patch by Christoph Scholz
> to ethereal for a dissector he wrote for the bluetooth stack in 2002.
> 
> 
> Christoph's email address unfortunately does not work now after 4 years :-(
> 
> 
> Since the patch is 4 years old it does not apply to ethereal svn any
> more  since too many internal APIs have changed.
> I am however massaging and refactoring it for inclusion and have
> included some of the protocol stack into ethereal already.
> 
> Ethereal reads the files generated by some tool called 'hcidump' (i am
> not a bluetooth guy,   im a san/nas guy  so im not read up on your
> tools)
> 
> I am currently refactoring the L2CAP layer and would really benefit
> from having some more example captures to work and verify with before
> i check this layer in.
> 
> In particular I am looking for L2CAP captures containing command
> packets with InformationRequest/Response, and connectionless reception
> channel packets.
> I would also like some captures where the ACL layer contains L2CAP
> pdus   that are fragmented across several ACL packets and a
> description on how the fragmentation works for bt.
> 
> 
> This is to start with, to proceed even further I would really benefit
> from having as many and as large captures as possible to verify with.
> The more the merrier.
> 
> 
> Anyone that can provide captures with these kind of packets, and who
> want me to refactor the patch so that it can all go into mainline
> ethereal,   PLEASE send me such hcidump captures.
> 
> 
> 
> best regards
> ronnie sahlberg
> 
> (I am not subscribed to this list since i am not really that
> interested in bluetooth   but it is a shame to let this patch diverge
> more than it already has  and support for bt would benefit some users.
> 
> Please send me as many hcidump captures as possible.   please.   thanks)
> 
> 
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid\x120709&bid&3057&dat\x121642
> _______________________________________________
> Bluez-devel mailing list
> Bluez-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bluez-devel

[-- Attachment #2: Type: text/html, Size: 5566 bytes --]

Re: [Bluez-devel] Ethereal support for bluetooth, developer needs sample captures

[Marcel Holtmann]

Hi Ronnie,

> Since the patch is 4 years old it does not apply to ethereal svn any
> more  since too many internal APIs have changed.
> I am however massaging and refactoring it for inclusion and have
> included some of the protocol stack into ethereal already.

I would like to to see full Bluetooth protocol support in Ethereal and
try to help you whereever possible.

> Ethereal reads the files generated by some tool called 'hcidump' (i am
> not a bluetooth guy,   im a san/nas guy  so im not read up on your
> tools)

The program hcidump supports the native hcidump file format and also the
BTSnoop file format. I might need to send you a patch for it at some
point.

> I am currently refactoring the L2CAP layer and would really benefit
> from having some more example captures to work and verify with before
> i check this layer in.

Post a pre-patch to this mailing list and I am going to have a look at
it.

> In particular I am looking for L2CAP captures containing command
> packets with InformationRequest/Response, and connectionless reception
> channel packets.

These are not really in use at all at the moment. I need to write a test
program to show them to you.

> I would also like some captures where the ACL layer contains L2CAP
> pdus   that are fragmented across several ACL packets and a
> description on how the fragmentation works for bt.

Let me see if I can get you some nice BNEP transmission. Once you get
BNEP on top of L2CAP you can hook it into TCP/IP then.

Regards

Marcel




-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Bluez-devel mailing list
Bluez-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-devel

Re: [Bluez-devel] Ethereal support for bluetooth, developer needs sample captures

[ronnie sahlberg]

[-- Attachment #1: Type: text/plain, Size: 2775 bytes --]

Hi, thanks for your response,   comments inline.

On 5/17/06, Marcel Holtmann <marcel@holtmann.org> wrote:
>
> Hi Ronnie,
>
> > Since the patch is 4 years old it does not apply to ethereal svn any
> > more  since too many internal APIs have changed.
> > I am however massaging and refactoring it for inclusion and have
> > included some of the protocol stack into ethereal already.
>
> I would like to to see full Bluetooth protocol support in Ethereal and
> try to help you whereever possible.



Thanks. I need as many captures as possible. I also need bugreports and
suggestions how to "prettify" the dissection so that the important
information in a packet is easy to find when parsing the trace.

It would also be great with someone adding some pages for the various
protocols at wiki.ethereal.com  with links to  protocol standards and
example capture files.



> Ethereal reads the files generated by some tool called 'hcidump' (i am
> > not a bluetooth guy,   im a san/nas guy  so im not read up on your
> > tools)
>
> The program hcidump supports the native hcidump file format and also the
> BTSnoop file format. I might need to send you a patch for it at some
> point.
>
> > I am currently refactoring the L2CAP layer and would really benefit
> > from having some more example captures to work and verify with before
> > i check this layer in.
>
> Post a pre-patch to this mailing list and I am going to have a look at
> it.


I have checked into current svn of ethereal dissectors up to and including
the l2cap layer.
No protocols above the l2cap layer is implemented yet though.

It decodes my ~20 l2cap packets correctly at least.




> In particular I am looking for L2CAP captures containing command
> > packets with InformationRequest/Response, and connectionless reception
> > channel packets.
>
> These are not really in use at all at the moment. I need to write a test
> program to show them to you.



if they are not used much, then dont waste time on them.    if something is
broken in the dissection   someone will complain later.


> I would also like some captures where the ACL layer contains L2CAP
> > pdus   that are fragmented across several ACL packets and a
> > description on how the fragmentation works for bt.
>
> Let me see if I can get you some nice BNEP transmission. Once you get
> BNEP on top of L2CAP you can hook it into TCP/IP then.



That would be really great.   Ill start working on refactoring the BNEP
dissector then.
Do you have a link to the standard for BNEP?

Are there also layers that map SCSI ontop of bluetooth?   If so it would be
interesting to hook in the SCSI dissection in ethereal into
the stack.


Regards
>
> Marcel
>
>
>

[-- Attachment #2: Type: text/html, Size: 3953 bytes --]

[Bluez-devel] Re: Ethereal support for bluetooth, developer needs sample captures

[ronnie sahlberg]

[-- Attachment #1: Type: text/plain, Size: 285 bytes --]

(sent to list since as not being subscribed I couldnt get your email address
from th ml archieve)

Ruud Beukema

Thanks for your kind offer of sharing your capture files.
Can you arrange somewhere where I can download them from?


Please email me at ronniesahlberg@gmail.com

[-- Attachment #2: Type: text/html, Size: 352 bytes --]