CATC BT004APA-X User manual

2403 Walsh Avenue, Santa Clara, CA 95051-1302 Tel: [phone] Fax: [phone]
For Software Version 1.0
Manual Version 1.0
8 February, 2002
CATC BTTracer™
Bluetooth™Protocol Analyzer
User’s Manual

2
Merlin Protocol Analyzer User’s ManualCATC Version 1.0
Document Disclaimer
The information contained in this document has been carefully checked and
is believed to be reliable. However, no responsibility can be assumed for
inaccuracies that may not have been detected.
CATC reserves the right to revise the information presented in this
document without notice or penalty.
Trademarks and Servicemarks
CATC, Merlin, Merlin’s Wand, NetMate, Advisor, Chief, FireInspector,
Inspector, Detective, Traffic Generator, BusEngine, USB4DOS, UPT, HPT,
UHT, Galaxy, IBTracer,SATracer,andAndromeda are trademarks of
Computer Access Technology Corporation.
Microsoft, Windows, and Windows NT are registered trademarks of
Microsoft Inc.
All other trademarks are property of their respective companies.
Copyright
Copyright © 2002, Computer Access Technology Corporation (CATC); All
Rights Reserved.
This document may be printed and reproduced without additional
permission, but all copies should contain this copyright notice.
FCC Conference Statement
This equipment has been tested and found to comply with the limits for a
Class A digital device and an intentional radiator, pursuant to Part 15 of the
FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate
radio frequency energy and, if not installed and used in accordance with the
instruction manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely
to cause harmful interference in which case the user will be required to
correct the interference at their own expense. The end user of this product
should be aware that any changes or modifications made to this equipment
without the approval of CATC could result in the product not meeting the
Class A limits, in which case the FCC could void the user's authority to
operate the equipment.

3
Merlin Protocol Analyzer User’s ManualCATC Version 1.0
Important Notice: To comply with FCC RF exposure requirements
(sections 1.1307 and 1.310 of the Rules) only the antenna supplied by
CATC must be used for this device. The antenna must be located at least 20
cm away from all persons.
EU Conference Statement
This equipment complies with the R&TT Directive 1999/5/EC. It has been
tested and found to comply with EN55022:1994/A1:1995/A2:1997 Class A,
EN61000-4-2:1995, EN61000-4-3:1995, EN61000-4-4:1995,
EN61000-4-5:1995, EN61000-4-6:1995, EN61000-4-11:1994,
EN61010-1:1993, and ESTI EN 300 328-1 V1.2.2 (2000-07).
Manual Version 1.8 Part number: 730-0017-00

4
Merlin Protocol Analyzer User’s ManualCATC Version 1.0

iii
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
TABLE OF CONTENTS
Chapter1 Overview.....................................1
Bluetooth™Overview..............................................1
GeneralDescription ...............................................2
Automation.......................................................4
Features .........................................................4
General...................................................4
Physical Components ........................................5
DisplayOptions ............................................5
RecordingOptions ..........................................5
TrafficGeneration ..........................................5
Bluetooth™BusEngine ......................................6
Specifications.....................................................7
Package...................................................7
PowerRequirements.........................................7
Environmental Conditions . ...................................7
Switches ..................................................7
LEDs ....................................................7
RecordingMemorySize .....................................7
Certification ...............................................7
Chapter2 QuickInstallation .............................9
SettingUptheAnalyzer.............................................9
InstallingtheSoftware..............................................9
YourFirstBluetooth™Recording....................................10
Chapter3 DetailedInstallation...........................13
System Components/Packing List . . ..................................13
TheInstalledMerlinUnit...........................................13
MerlinSystemSetup ..............................................14
ACPowerSource.................................................14
ExternalInterfaceBreakoutBoard....................................15
BreakoutBoardExternalOutputSignallingPins..................16
PrototypeReworkArea......................................17
PCConnection...................................................17
AntennaInformation ..............................................17
AnalyzerPCRequirements .........................................17
MerlinProgramInstallation.........................................18
LoadingtheMerlinUSBDrivers..............................18
InstallingtheMerlinApplicationProgram ......................18
MerlinProgramStartup............................................19
MakingaRecording...............................................20
Chapter4 Updates.....................................21
Software,Firmware,andBusEngineRevisions..........................21
SoftwareUpdates.................................................22

iv
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
SoftwareLicenseUpdates..........................................22
Viewinglicensinginformation................................23
BusEngineandFirmwareUpdateUpdates..............................23
AutomaticUpdates.........................................24
ManualUpdatestoBusEngineandFirmware ....................25
UpdatingtheBusEngine.....................................26
UpdatingtheFirmware......................................27
Chapter5 SoftwareOverview............................29
TheMainDisplayWindows.........................................29
ViewOptions....................................................31
ToolBar..................................................31
StatusBar.......................................................33
RecordingProgress.........................................33
RecordingStatus...........................................34
AnalyzerStatus............................................34
SearchStatus..............................................35
ZoomIn..................................................35
ZoomOut ................................................35
ToolTips........................................................35
MerlinAnalyzerKeyboardShortcuts .................................36
Chapter6 RecordingWizard ............................37
StartingRecordingWizard...................................37
RecordingaTrafficonaNewPiconet.................................38
RecordinganExistingPiconet ......................................49
RecordinginTestMode............................................58
RecordinginReducedHoppingMode..........................58
RecordinginSingleFrequencyMode.................................62
Chapter7 RecordingOptions............................63
OpeningtheRecordingOptionsDialogBox .....................63
RecordingOptions-General........................................64
Recordingtype ............................................64
Options..................................................65
BufferSize ...............................................65
TriggerPosition............................................65
RecordingOptions-Modes.........................................66
RecordingMode...........................................67
InquiryRecording..........................................67
PiconetRecording..........................................68
HopSequence.............................................68
SyncMethods.............................................69
ForceRe-synchronization....................................72
FollowMaster/SlaveSwitch..................................73
MatchClockRate..........................................73
ShowPagingTraffic........................................73

v
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
PiconetAddresses(MSB->LSB) .............................73
OtherParameters...........................................74
Debug/Test ...............................................75
RecordingOptions-Events.........................................75
EventsOptions ............................................75
PayloadLengthError.......................................81
RecordingOptions-Actions........................................82
ActionsWindowLayout.....................................82
ActionButtons-TheirFunctions..............................83
Counting Buttons - Their Functions . . . .........................83
BlueDotMenus ...........................................85
SavingRecordingOptions..........................................91
RecordingBluetoothTraffic ........................................92
Chapter8 DisplayOptions ..............................95
GeneralDisplayOptions ...........................................95
TraceViewingLevel........................................96
CreatingNewDisplayOptionsFiles ...........................96
ColorDisplayOptions.............................................97
FormatsDisplayOptions...........................................99
Hiding.........................................................100
SavingDisplayOptions...........................................101
Chapter9 ReadingaCATCTrace.......................103
TraceViewFeatures..............................................103
InterpretingtheDisplayedInformation...............................103
Tooltips........................................................104
SetMarker .....................................................104
EditorClearMarker .............................................105
ExpandedandCollapsedDataFormats...............................106
HideFrequencyHops.............................................107
HideNullsandPolls..............................................108
MenusinClickedFields...........................................108
HideUnassociatedTraffic.........................................108
Chapter10 DecodingHigherProtocols...................109
Introduction ....................................................109
LMPandL2CAPMessages........................................109
DecodingandViewingHigherProtocolData..........................110
DecodingViatheDecodingToolbar...........................110
DecodingViatheDisplayOptionsDialogBox ..................111
Tooltips........................................................112
ViewingPacketsinLMPandL2CAPMessages........................112
TypesofLMPandL2CAPMessages ................................112
Viewing L2CAP Channel Connections . . .............................113
ViewingProtocolMessagesandTransactions..........................114
ViewingL2CAPMessagesinProtocolMessages ................115

vi
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
HowtoDecode...........................................115
ExpandingProtocolMessages ...............................115
ChangingProtocolAssignments ....................................116
UsingtheDecodingAssignmentsDialogBox...................116
RemovingUser-AssignedProtocolAssignments.................117
ManuallyAssigningProtocols...............................118
OtherAssignments:OBEXClient/ServerStatus.................118
ChanginganOBEXClientorServerStatus.....................119
DecodingBNEP..........................................119
DecodingHID............................................119
Chapter11 OtherFeatures .............................121
Search.........................................................121
GotoTrigger.............................................121
GotoPacket/Message/Protocol ..............................121
GotoMarker.............................................122
Goto...................................................122
Error ...................................................126
SoftBitError.............................................126
LossofSync.............................................126
Find....................................................126
Event Groups . . ..........................................128
Union,Intersection,andExclusion............................132
UsingFind...............................................132
FindNext ...............................................134
EditComment ..................................................135
Reports........................................................135
FileInformation ..........................................135
ErrorSummary...........................................136
TimingCalculations .......................................136
TrafficSummary .........................................137
BTNeighborhood................................................139
Encryption .....................................................139
ConfiguringMerlinforEncryption............................140
Chapter12 HowtoContactCATC.......................143
Chapter13 WarrantyandLicense.......................143
Index................................................145

1
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
1. Overview
The CATC BTTracer™ Protocol Analyzer is a member in CATC's
industry-leading line of high performance, serial bus protocol analyzers.
PrecededbyCATC’sUSBChief™ and IEEE 1394 FireInspector™
Analyzers, BTTracer has been designed using the same modular software
and hardware architecture that made its predecessors highly successful in
the serial bus protocol analyzer market worldwide.
1.1 Bluetooth™ Overview
The Bluetooth™ wireless technology is set to revolutionize the personal
connectivity market by providing freedom from wired connections. It is a
specification for a small-form factor, low-cost radio solution providing links
between mobile computers, mobile phones and other portable handheld
devices, and connectivity to the internet.
The Bluetooth™ Special Interest Group (SIG), comprised of leaders in the
telecommunications, computing, and network industries, is driving
development of the technology and bringing it to market. The Bluetooth™
SIG includes promoter companies 3Com, Ericsson, IBM, Intel, Lucent,
Microsoft, Motorola, Nokia and Toshiba, and more than 2500 SIG
members.
Bluetooth™ is a radio technology specification designed to transmit both
voice and data wirelessly, providing an easier way for a variety of mobile
computing, communications and other devices to communicate with one
another without the need for cables. Bluetooth™ could make possible what
is being called the personal-area network by allowing users to transmit small
amounts of data at 1M bit/sec with a range of 10 to 100 meters, depending
the power of the radio, over the 2.4-GHz radio frequency. The key benefits
of the Bluetooth™ technology are robustness, low complexity, low power
and low cost. Bluetooth™ employs a rapid frequency hopping mechanism
to minimize the effects of ‘collisions’ with other protocols and devices
operating in the same frequency band. Mechanisms exist for a Bluetooth™
device to determine all devices in range as well as to request connection to
a piconet as either a master or a slave.
Please refer to the Bluetooth™ Specification, version 1.1 for details on the
protocol. The Bluetooth™specification is available from the Bluetooth™
SIG at its web site http://www.bluetooth.org/

2
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
1.2 General Description
The BTTracer Protocol Analyzer is designed as a stand-alone unit that can
be easily configured and controlled by a portable or desktop PC connected
via its USB port. BTTracer provides customers with the familiar ‘CATC
Trace’ user interface that is the de facto industry standard for documenting
the performance of high-speed serial protocols.
BTTracer supports the functionality required to analyze all levels, including
the baseband, of the Bluetooth™ wireless protocol. The featured Radio
Interface allows users to probe and analyze transactions at the lowest level
within the Bluetooth™ architecture. By creating this "Point of Observation"
or probing point within the radio level packet view, the user can analyze all
levels of the protocol stack.
BTTracer is a non-intrusive testing tool for Bluetooth™ piconets providing
network traffic capture and analysis. Hardware triggering allows real-time
events to be captured from a piconet. Hardware filtering allows the filtering
out of fields, packets, and errors from the recording. Filtering allows users
to focus recordings on events of interest and to preserve recording memory
so that the recording time can be extended.
Recorded data is presented in colored graphics in a trace viewer application.
This application has advanced search and viewing capabilities that allow the
user to quickly locate specific data, errors and other conditions, thereby
focussing the user’s attention on events of interest.
The BTTracer Protocol Analyzer functions with any personal computer
using the Windows 98, Windows 98SE, Windows 2000, Windows NT 4.0,
Windows ME, or Windows XP operating systems and equipped with a
functional USB interface. For an updated set of system requirements for the
host machine, please refer to the readme file.
The Analyzer is configured and controlled through a personal computer
USB port. It can be used with portable computers for field service and
maintenance as well as with desktop units in a development environment.
The Analyzer is easily installed by connecting a cable between the
computer’s USB port and the Analyzer’s USB port.

3
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
Sample Bluetooth™ Piconet with BTTracer Protocol Analyzer
BTTracer provides on-the-fly detection of and triggering on such events as
Packet Headers and Errors. Whether recording manually or with a specified
trigger condition, BTTracer continuously records the bus data in a
wrap-around fashion until manually stopped or until the Trigger Event is
detected and a specified post-Trigger amount of bus data is recorded.
Upon detection of a triggering event, the analyzer continues to record data
up to a point specified by the user. Real-time detection of events can be
individually enabled or disabled to allow triggering on events as they
happen. This includes predefined exception or error conditions and a

4
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
user-defined set of trigger events. The unit can also be triggered by an
externally supplied signal. An external DB-9 connector provides a path for
externally supplied data or timing data to be recorded along with bus traffic.
This DB-9 connector also provides a path for BTTracer to transmit
externally two control, timing, or recovered signals for purposes of probing
and use by other circuitry.
The BTTracer software provides powerful search functions that enable
investigation of particular events and allow the software to identify and
highlight specific events. In addition to immediate analysis, you can print
any part of the data. Use the Save As feature to save the data on disk for later
viewing. The program also provides a variety of timing information and
data analysis reports.
1.3 Automation
The BTTracer software includes an Application Program Interface (API) for
developing testing programs and scripts in C++ and Visual Basic. The API
reproduces most of the commands embodied in the BTTracer trace viewer
software. This API allows users to automate procedures that otherwise have
to be run manually via the trace viewer software. The Automation API can
be run locally on the PC attached to BTTracer or remotely over a network
connection.
For further details, download the BTTracer Automation Application
Programming Interface User’s Manual from the CATC website:
http://www.catc.com/support.html
1.4 Features
General
• Flexible design - reconfigurable hardware for future enhancements.
• User friendly - the Graphical User Interface software of BTTracer
Analyzer is designed to be consistent with the ‘CATC Trace’ using color
and graphics to display Bluetooth™ traffic.
• Radio Level Point of Observation and Capture - traffic capture at the
Radio Level for comprehensive analysis.
• Complies with Bluetooth™ v1.1 specification.
• Supports point-to-point and point-to-multipoint Bluetooth™ piconets.
• Supports both 79 frequency hop and 23 frequency hop standards.
• Automatic tracking of changes in the hopping scheme.

5
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
• Automatic tracking of whitened and non-whitened packets and traffic.
• Free non-recording, view-only software available.
• Power-on self-diagnostics.
• Internal 100V to 240 V AC power supply.
• Compliant with FCC class A requirements / meets all CE mark
requirements.
• One year warranty and hot-line customer support.
Physical Components
Note For an updated description of requirements for the host machine, please refer to the
readme file.
• Trace viewer software support for all of the above plus Windows 95.
• Recording memory of 128MB - enough to record twenty five minutes of
high volume traffic.
Display Options
• Analyzes and displays a transaction-level view of piconet traffic with
accurate time-stamps and frequency hop information.
• Software analysis and data presentation at several protocol levels:
Baseband, LMP, L2CAP, SDP, RFCOMM, TCS, OBEX, HDLC, BNEP,
PPP, AT, and HID Commands.
Recording Options
• Flexible advanced triggering capabilities including - multiple triggering
modes, selective views, timing analysis, search functions, protocol
packet errors, transaction errors, packet type and destination device, data
patterns, or any of these trigger types in combination.
• User defined trigger position.
• Support for various piconet characteristics by enabling the user to
configure the synchronization method and recording parameters.
• Real-time hardware filtering of captured traffic for optimizing analyzer
memory usage.
Traffic Generation
Traffic generation capability is provided by BTTrainer.

6
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
Bluetooth™ BusEngine
CATC’s BusEngine™ Technology is at the heart of the new BTTracer
Analyzer. The revolutionary BusEngine core uses state-of-the-art EPLD
technology and incorporates both the real-time recording engine and the
configureable building blocks that implement data/state/error detection,
triggering, capture filtering, external signal monitoring and event counting
& sequencing. And like the flash-memory-based firmware that controls its
operation, all BusEngine logic is fully field upgradeable, using
configuration files that can be downloaded from the CATC Website.

7
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
1.5 Specifications
Package
Power Requirements
90-264VAC, 47-63Hz (universal input), 100W maximum
Environmental Conditions
Switches
LEDs
Recording Memory Size
128M x 8-bit DRAM for traffic data capture, timing, state and other data.
Certification
FCC (Class A), CE Mark
Dimensions: 9.2 x 8.4 x 2.5 inches
(23.4 x 21.3 x 6.4 cm)
Connectors: AC power connection
external clock input (EXT CLK, BNC)
host connection (USB, type ‘B’)
data connector (Data In/Out, 9-pin DB)
Weight: 2.8 lbs. (1.2 kg)
Operating Range: 0 to 55 °C (32 to 131 °F)
Storage Range: -20 to 80 °C (-4 to 176 °F)
Humidity: 10 to 90%, non-condensing
Power: on/off
Manual Trigger: when pressed forces a trigger event
Power (PWR): illuminated when the analyzer is powered on.
Recording (REC): illuminated when the analyzer is actively recording traffic
data.
Triggered (TRG): illuminated during power-on testing, and when the analyzer
has detected a valid trigger condition.
Synchronized
(SYNC):
flashes during acquisition of the traffic hop sequence, illu-
minated when the analyzer is locked to the hop sequence.

8
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0

9
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
2. Quick Installation
The BTTracer Protocol Analyzer components and software are easily
installed and quickly ready to run on most Windows-based personal
computer systems. You can begin making Bluetooth™ recordings after
following these initial steps. However, if you are new to personal computers
and protocol analyzers, or if you are unsure about what to do after reading
the Quick Installation instructions, or if your analyzer does not work after
you follow these instructions, read through the subsequent sections in this
manual.
2.1 Setting Up the Analyzer
Step 1 Attach the Antenna to the ANT connection point. The
antenna should point up.
Step 2 Connect the AC power cable to the rear of the analyzer.
Step 3 Turn on the power switch on the rear of the analyzer.
Step 4 Insert the BTTracer CD into the CD ROM drive of the PC
that will be administering the Analyzer. If you prefer to
install from diskette, insert the first BTTracer diskette (Disk
1 of 6) into the floppy disk drive.
Step 5 Connect the USB cable between the USB port on the back of
the analyzer and a USB port on the analyzing PC.
Step 6 Follow Windows on-screen Plug-and-Play instructions for
the automatic installation of the BTTracer Analyzer as a
USB device on your analyzing PC (the required USB files
are included on the BTTracer CD and the first BTTracer
diskette).
2.2 Installing the Software
Step 1 From the setup directory, run setup, and follow the on-screen
instructions to install the BTTracer application on the
analyzing PC hard disk.
Step 2 To start the application, launch the CATC BTTracer
program from the Start Menu:
Start>Programs>CATC>BTTracer.

10
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
2.3 Your First Bluetooth™ Recording
After installing and launching the software, you can test BTTracer by
creating a recording of a General Inquiry. In this test, BTTracer will issue
a General Inquiry that asks local devices to identify themselves. BTTracer
then records the responses.
Step 1 Select Recording Options under Setup on the Menu Bar.
The Recording Options dialog box will open showing factory default
settings such as “manual trigger” and 1 Mbytes buffer size. For the
General Inquiry recording you are about to create, these settings can be
left unchanged.

11
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
Step 2 Select the Modes tab.
The following dialog box will open showing factory default settings.
BTTracer defaults to “General Inquiry.” For this recording, leave most
of these settings unchanged. If you are recording a Hop Frequency that
is not 79 Hops Standard, you will need to select the appropriate
standard from the Hop Frequency menu below.
Step 3 Click OK to close the Recording Options window and
activate the recording options you selected.
At this point, BTTracer will be ready to record.
Step 4 Click on the Tool Bar.
BTTracer starts to record the Bluetooth™ traffic immediately. The
Bluetooth™ Inquiry process will proceed for 20 seconds. After 20
seconds has elapsed, the analyzer uploads the data and displays the
packets.
Step 5 If you wish to terminate the recording before the snapshot

12
BTTracer Protocol Analyzer User’s ManualCATC Version 1.0
automatically completes, click on the Tool Bar.
After a few moments, the recording will terminate and the results will
display. The screen should look like the sample recording below which
shows the FHS packets generated during the Inquiry process.
When the recording session is finished, the bus traffic is saved to the hard
drive as a file named data.blt or whatever name you assign as the default
filename. While the file is being saved, you should see a brown progress
bar at the bottom of the screen. When the bar turns white, it indicates that
the data has been saved to disk.
Step 6 To save a current recording for future reference, Select Save
As under File on the Menu Bar.
OR
Click on the Tool Bar.
You see the standard Save As screen.
Step 7 Give the recording a unique name and save it to the
appropriate directory.