Display Filter Reference: Bluetooth Low Energy Link Layer

Protocol field name: btle

Versions: 1.12.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
btle.access_address Access Address Unsigned integer, 4 bytes 1.12.0 to 2.6.1
btle.access_address.bit_errors AccessAddress has errors present at capture Label 1.12.0 to 2.6.1
btle.access_address.illegal AccessAddress has illegal value Label 1.12.0 to 2.6.1
btle.access_address.matched AccessAddress matched at capture Label 1.12.0 to 2.6.1
btle.advertising_address Advertising Address Ethernet or other MAC address 1.12.0 to 2.6.1
btle.advertising_header Packet Header Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.advertising_header.ch_sel Channel Selection Algorithm Boolean 2.4.2 to 2.6.1
btle.advertising_header.length Length Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.advertising_header.pdu_type PDU Type Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.advertising_header.randomized_rx Rx Address Boolean 1.12.0 to 2.6.1
btle.advertising_header.randomized_tx Tx Address Boolean 1.12.0 to 2.6.1
btle.advertising_header.reserved Reserved Boolean 1.12.0 to 2.6.1
btle.advertising_header.rfu.1 RFU Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.advertising_header.rfu.2 RFU Unsigned integer, 1 byte 1.12.0 to 2.4.1
btle.control.channel_map Channel Map Sequence of bytes 1.12.0 to 2.6.1
btle.control.company_id Company Id Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.control.encrypted_diversifier Encrypted Diversifier Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.error_code Error Code Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.control.feature_set Feature Set Unsigned integer, 8 bytes 1.12.0 to 2.6.1
btle.control.feature_set.ch_sel_2 Channel Selection Algorithm #2 Boolean 2.4.2 to 2.6.1
btle.control.feature_set.connection_parameters_request_procedure Connection Parameters Request Procedure Boolean 1.12.0 to 2.6.1
btle.control.feature_set.ext_scan_flt_pol Extended Scanner Filter Policies Boolean 2.4.0 to 2.6.1
btle.control.feature_set.extended_reject_indication Extended Reject Indication Boolean 1.12.0 to 2.6.1
btle.control.feature_set.le_2m_phy LE 2M PHY Boolean 2.4.2 to 2.6.1
btle.control.feature_set.le_coded_phy LE Coded PHY Boolean 2.4.2 to 2.6.1
btle.control.feature_set.le_encryption LE Encryption Boolean 1.12.0 to 2.6.1
btle.control.feature_set.le_extended_adv LE Extended Advertising Boolean 2.4.2 to 2.6.1
btle.control.feature_set.le_ping LE Ping Boolean 1.12.0 to 2.6.1
btle.control.feature_set.le_pkt_len_ext LE Data Packet Length Extension Boolean 2.4.0 to 2.6.1
btle.control.feature_set.le_power_class_1 LE Power Class 1 Boolean 2.4.2 to 2.6.1
btle.control.feature_set.le_privacy LL Privacy Boolean 2.4.0 to 2.6.1
btle.control.feature_set.min_num_used_ch_proc Minimum Number of Used Channels Procedure Boolean 2.4.2 to 2.6.1
btle.control.feature_set.periodic_adv LE Periodic Advertising Boolean 2.4.2 to 2.6.1
btle.control.feature_set.reserved Reserved Sequence of bytes 1.12.0 to 2.6.1
btle.control.feature_set.reserved_5_7 Reseved Boolean 1.12.0 to 2.2.15
btle.control.feature_set.reserved_bits Reserved Unsigned integer, 1 byte 2.4.2 to 2.6.1
btle.control.feature_set.slave_initiated_features_exchange Slave Initiated Features Exchange Boolean 1.12.0 to 2.6.1
btle.control.feature_set.st_mod_idx_rx Stable Modulation Index - Receiver Boolean 2.4.2 to 2.6.1
btle.control.feature_set.st_mod_idx_tx Stable Modulation Index - Transmitter Boolean 2.4.2 to 2.6.1
btle.control.instant Instant Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.interval Interval Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.interval.max Interval Max Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.interval.min Interval Min Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.latency Latency Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.m_to_s_phy Master to Slave PHY Unsigned integer, 1 byte 2.4.2 to 2.6.1
btle.control.master_session_initialization_vector Master Session Initialization Vector Unsigned integer, 4 bytes 1.12.0 to 2.6.1
btle.control.master_session_key_diversifier Master Session Key Diversifier Unsigned integer, 8 bytes 1.12.0 to 2.6.1
btle.control.max_rx_octets Max RX octets Unsigned integer, 2 bytes 2.4.0 to 2.6.1
btle.control.max_rx_time Max RX time Unsigned integer, 2 bytes 2.4.0 to 2.6.1
btle.control.max_tx_octets Max TX octets Unsigned integer, 2 bytes 2.4.0 to 2.6.1
btle.control.max_tx_time Max TX time Unsigned integer, 2 bytes 2.4.0 to 2.6.1
btle.control.min_used_channels Minimum Used Channels Unsigned integer, 1 byte 2.4.2 to 2.6.1
btle.control.offset.0 Offset 0 Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.offset.1 Offset 1 Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.offset.2 Offset 2 Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.offset.3 Offset 3 Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.offset.4 Offset 4 Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.offset.5 Offset 5 Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.phys PHYs Unsigned integer, 1 byte 2.4.2 to 2.6.1
btle.control.phys.le_1m_phy Sender prefers to use the LE 1M PHY Boolean 2.4.2 to 2.6.1
btle.control.phys.le_2m_phy Sender prefers to use the LE 2M PHY Boolean 2.4.2 to 2.6.1
btle.control.phys.le_coded_phy Sender prefers to use the LE Coded PHY Boolean 2.4.2 to 2.6.1
btle.control.phys.reserved Reserved for future use Unsigned integer, 1 byte 2.4.2 to 2.6.1
btle.control.preffered_periodicity Preffered Periodicity Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.control.random_number Random Number Unsigned integer, 8 bytes 1.12.0 to 2.6.1
btle.control.reference_connection_event_count Reference Connection Event Count Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.reject_opcode Reject Opcode Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.control.rx_phys RX PHYs Unsigned integer, 1 byte 2.4.2 to 2.6.1
btle.control.s_to_m_phy Slave to Master PHY Unsigned integer, 1 byte 2.4.2 to 2.6.1
btle.control.slave_session_initialization_vector Slave Session Initialization Vector Unsigned integer, 8 bytes 1.12.0 to 2.6.1
btle.control.slave_session_key_diversifier Slave Session Key Diversifier Unsigned integer, 8 bytes 1.12.0 to 2.6.1
btle.control.subversion_number Subversion Number Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.timeout Timeout Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.tx_phys TX PHYs Unsigned integer, 1 byte 2.4.2 to 2.6.1
btle.control.unknown_type Unknown Type Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.control.version_number Version Number Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.control.window_offset Window Offset Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.control.window_size Window Size Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.control_opcode Control Opcode Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.crc CRC Unsigned integer, 3 bytes 1.12.0 to 2.6.1
btle.crc.correct Expert Info Label 1.12.0 to 2.2.15
btle.crc.incorrect Incorrect CRC Label 1.12.0 to 2.6.1
btle.crc.indeterminate CRC unchecked, not all data available Label 1.12.0 to 2.6.1
btle.data_header Data Header Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.data_header.length Length Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.data_header.llid LLID Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.data_header.more_data More Data Boolean 1.12.0 to 2.6.1
btle.data_header.next_expected_sequence_number Next Expected Sequence Number Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.data_header.rfu RFU Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.data_header.sequence_number Sequence Number Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.initiator_address Initator Address Ethernet or other MAC address 1.12.0 to 2.6.1
btle.l2cap.fragment L2CAP fragment Frame number 2.4.0 to 2.6.1
btle.l2cap.fragment.count L2CAP fragment count Unsigned integer, 4 bytes 2.4.0 to 2.6.1
btle.l2cap.fragment.error L2CAP defragmentation error Frame number 2.4.0 to 2.6.1
btle.l2cap.fragment.multiple_tails L2CAP has multiple tail fragments Boolean 2.4.0 to 2.6.1
btle.l2cap.fragment.overlap L2CAP fragment overlap Boolean 2.4.0 to 2.6.1
btle.l2cap.fragment.overlap.conflicts L2CAP fragment overlapping with conflicting data Boolean 2.4.0 to 2.6.1
btle.l2cap.fragment.too_long_fragment L2CAP fragment too long Boolean 2.4.0 to 2.6.1
btle.l2cap.fragments L2CAP fragments Label 2.4.0 to 2.6.1
btle.l2cap.reassembled.in Reassembled in Frame number 2.4.0 to 2.6.1
btle.l2cap.reassembled.length Reassembled L2CAP length Unsigned integer, 4 bytes 2.4.0 to 2.6.1
btle.l2cap_data L2CAP Fragment Label 1.12.0 to 2.6.1
btle.l2cap_index L2CAP Index Unsigned integer, 4 bytes 2.4.0 to 2.6.1
btle.length Length Unsigned integer, 1 byte 2.4.0 to 2.6.1
btle.link_layer_data Link Layer Data Label 1.12.0 to 2.6.1
btle.link_layer_data.access_address Access Address Unsigned integer, 4 bytes 1.12.0 to 2.6.1
btle.link_layer_data.channel_map Channel Map Sequence of bytes 1.12.0 to 2.6.1
btle.link_layer_data.crc_init CRC Init Unsigned integer, 3 bytes 1.12.0 to 2.6.1
btle.link_layer_data.hop Hop Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.link_layer_data.interval Interval Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.link_layer_data.latency Latency Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.link_layer_data.sleep_clock_accuracy Sleep Clock Accuracy Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.link_layer_data.timeout Timeout Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.link_layer_data.window_offset Window Offset Unsigned integer, 2 bytes 1.12.0 to 2.6.1
btle.link_layer_data.window_size Window Size Unsigned integer, 1 byte 1.12.0 to 2.6.1
btle.master_bd_addr Master Address Ethernet or other MAC address 2.0.0 to 2.6.1
btle.missing_fragment_start Missing Fragment Start Label 2.4.0 to 2.6.1
btle.retransmit Retransmission Label 2.4.2 to 2.6.1
btle.scan_responce_data Scan Response Data Sequence of bytes 1.12.0 to 2.6.1
btle.scanning_address Scanning Address Ethernet or other MAC address 1.12.0 to 2.6.1
btle.slave_bd_addr Slave Address Ethernet or other MAC address 2.0.0 to 2.6.1
btle.unknown_data Unknown data Label 1.12.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More