6.5 Sniffing a Connection Between Bonded Devices

The following are the steps to use the Bluetooth Low Energy Sniffer to sniff an encrypted connection between bonded devices:
  1. Run the Bluetooth Low Energy Sniffer (if not already running).
  2. Choose the device from the list of devices.
  3. Input the LTK for the bond.

If the connection has an existing legacy bond, the user must select “Legacy LTK” as the input key. Then, enter the legacy LTK key in big-endian, hexadecimal format with a leading 0x into the input field in Wireshark.

If the connection has an existing LE Secure Connections bond, the user must select “SC LTK” as the input key. Then, enter the LE Secure Connections LTK key in big-endian, hexadecimal format with a leading 0x into the input field in Wireshark.

Finally, initiate encryption between the devices.
Note: Pairing is not performed when a bond already exists.