Display Filter Reference: Nordic BLE Sniffer

Protocol field name: nordic_ble

Versions: 2.4.0 to 2.6.3

Back to Display Filter Reference

Field name Description Type Versions
nordic_ble.board_id Board Unsigned integer, 1 byte 2.4.0 to 2.6.3
nordic_ble.channel Channel Unsigned integer, 1 byte 2.4.0 to 2.6.3
nordic_ble.crc.bad CRC is bad Label 2.4.0 to 2.6.3
nordic_ble.crcok CRC Boolean 2.4.0 to 2.6.3
nordic_ble.delta_time Delta time (µs end to start) Unsigned integer, 4 bytes 2.4.0 to 2.6.3
nordic_ble.delta_time_ss Delta time (µs start to start) Unsigned integer, 4 bytes 2.4.0 to 2.6.3
nordic_ble.direction Direction Boolean 2.4.0 to 2.6.3
nordic_ble.encrypted Encrypted Boolean 2.4.0 to 2.6.3
nordic_ble.event_counter Event counter Unsigned integer, 2 bytes 2.4.0 to 2.6.3
nordic_ble.flags Flags Unsigned integer, 1 byte 2.4.0 to 2.6.3
nordic_ble.header Header Label 2.4.0 to 2.6.3
nordic_ble.hlen Length of header Unsigned integer, 1 byte 2.4.0 to 2.6.3
nordic_ble.legacy_marker Legacy marker Unsigned integer, 2 bytes 2.4.0 to 2.6.3
nordic_ble.len Length of packet Unsigned integer, 2 bytes 2.4.0 to 2.6.3
nordic_ble.length.bad Length is incorrect Label 2.4.0 to 2.6.3
nordic_ble.mic.bad MIC is bad Label 2.4.0 to 2.6.3
nordic_ble.mic_not_relevant MIC Boolean 2.4.6 to 2.6.3
nordic_ble.micok MIC Boolean 2.4.0 to 2.6.3
nordic_ble.packet_counter Packet counter Unsigned integer, 2 bytes 2.4.0 to 2.6.3
nordic_ble.packet_id Packet ID Unsigned integer, 1 byte 2.4.0 to 2.6.3
nordic_ble.phy PHY Unsigned integer, 1 byte 2.4.6 to 2.6.3
nordic_ble.plen Length of payload Unsigned integer, 2 bytes 2.4.0 to 2.6.3
nordic_ble.protover Protocol version Unsigned integer, 1 byte 2.4.0 to 2.6.3
nordic_ble.protover.bad Unknown version Label 2.4.6 to 2.6.3
nordic_ble.rfu RFU Unsigned integer, 1 byte 2.4.6 to 2.6.3
nordic_ble.rssi RSSI (dBm) Signed integer, 2 bytes 2.4.0 to 2.6.3
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More