Tektronix BPA105 User manual

User Manual
BPA105
Bluetooth Protocol Analyzer
071-XXXX-00
This document applies to firmware version 2.3
and above.
Check for regular BPA Series software updates at
www.tektronix.com/bpa_software
www.tektronix.com

Copyright ©Tektronix, Inc. All rights reserved. Licensed software products are owned by Tektronix or its suppliers and
are protected by United States copyright laws and international treaty provisions.
Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the
Rights in Technical Data and Computer Software clause at DFARS 252.227-7013, or subparagraphs (c)(1) and (2) of the
Commercial Computer Software -- Restricted Rights clause at FAR 52.227-19, as applicable.
Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication supercedes
that in all previously published material. Specifications and price change privileges reserved.
Tektronix, Inc., P.O. Box 500, Beaverton, OR 97077
TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.

WARRANTY
Tektronix warrants that the products that it manufactures and sells will be free from defects in materials and
workmanship for a period of three (3) years from the date of shipment. If a product proves defective during this
warranty period, Tektronix, at its option, either will repair the defective product without charge for parts and labor,
or will provide a replacement in exchange for the defective product.
In order to obtain service under this warranty, Customer must notify Tektronix of the defect before the expiration
of the warranty period and make suitable arrangements for the performance of service. Customer shall be
responsible for packaging and shipping the defective product to the service center designated by Tektronix, with
shipping charges prepaid. Tektronix shall pay for the return of the product to Customer if the shipment is to a
location within the country in which the Tektronix service center is located. Customer shall be responsible for
paying all shipping charges, duties, taxes, and any other charges for products returned to any other locations.
This warranty shall not apply to any defect, failure or damage caused by improper use or improper or inadequate
maintenance and care. Tektronix shall not be obligated to furnish service under this warranty a) to repair damage
resulting from attempts by personnel other than Tektronix representatives to install, repair or service the product;
b) to repair damage resulting from improper use or connection to incompatible equipment; c) to repair any
damage or malfunction caused by the use of non-Tektronix supplies; or d) to service a product that has been
modified or integrated with other products when the effect of such modification or integration increases the time
or difficulty of servicing the product.
THIS WARRANTY IS GIVEN BY TEKTRONIX IN LIEU OF ANY OTHER WARRANTIES, EXPRESS
OR IMPLIED. TEKTRONIX AND ITS VENDORS DISCLAIM ANY IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. TEKTRONIX’
RESPONSIBILITY TO REPAIR OR REPLACE DEFECTIVE PRODUCTS IS THE SOLE AND
EXCLUSIVE REMEDY PROVIDED TO THE CUSTOMER FOR BREACH OF THIS WARRANTY.
TEKTRONIX AND ITS VENDORS WILL NOT BE LIABLE FOR ANY INDIRECT, SPECIAL,
INCIDENTAL, OR CONSEQUENTIAL DAMAGES IRRESPECTIVE OF WHETHER TEKTRONIX OR
THE VENDOR HAS ADVANCE NOTICE OF THE POSSIBILITY OF SUCH DAMAGES.

WARRANTY
Tektronix warrants that the media on which this software product is furnished and the encoding of the programs on
the media will be free from defects in materials and workmanship for a period of three (3) months from the date of
shipment. If a medium or encoding proves defective during the warranty period, Tektronix will provide a
replacement in exchange for the defective medium. Except as to the media on which this software product is
furnished, this software product is provided “as is” without warranty of any kind, either express or implied.
Tektronix does not warrant that the functions contained in this software product will meet Customer’s
requirements or that the operation of the programs will be uninterrupted or error-free.
In order to obtain service under this warranty, Customer must notify Tektronix of the defect before the expiration
of the warranty period. If Tektronix is unable to provide a replacement that is free from defects in materials and
workmanship within a reasonable time thereafter, Customer may terminate the license for this software product
and return this software product and any associated materials for credit or refund.
THIS WARRANTY IS GIVEN BY TEKTRONIX IN LIEU OF ANY OTHER WARRANTIES, EXPRESS
OR IMPLIED. TEKTRONIX AND ITS VENDORS DISCLAIM ANY IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. TEKTRONIX’
RESPONSIBILITY TO REPLACE DEFECTIVE MEDIA OR REFUND CUSTOMER’SPAYMENTIS
THE SOLE AND EXCLUSIVE REMEDY PROVIDED TO THE CUSTOMER FOR BREACH OF THIS
WARRANTY. TEKTRONIX AND ITS VENDORS WILL NOT BE LIABLE FOR ANY INDIRECT,
SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES IRRESPECTIVE OF WHETHER
TEKTRONIX OR THE VENDOR HAS ADVANCE NOTICE OF THE POSSIBILITY OF SUCH
DAMAGES.

BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
i
Table of Contents
General Safety Summary iii...................................
Preface v...................................................
Reference Documents v.............................................
Contacting Tektronix vi.............................................
Operating Basics
Acquiring Piconet Packet Data 1--1..............................
Overview 1--1.......................................................
Collecting Data 1--2..................................................
Understanding the Data Acquisition Window 1--4..........................
Setting Up an Acquisition 1--9.........................................
Setting Up the Data Filter 1--14..........................................
Setting Up Triggers 1--14..............................................
Starting a Logging Session 1--24.........................................
Ending a Logging Session 1--24.........................................
Saving the Current Logging Session 1--24.................................
Using the HCI Terminal Application 1--24.................................
Analyzing Piconet Packet Data 1--27..............................
Opening a Data File 1--27..............................................
Understanding the Data Analysis Window 1--28............................
Reference
Reference 2--1.................................................
Using Bookmarks 2--1................................................
Exporting Data 2--3..................................................
Generating Error Packet Data 2--3......................................
Enabling Decryption 2--9..............................................
Appendices
Appendix A: Specifications A--1..................................
Appendix B: Accessories B--1...................................
Standard Accessories B--1.............................................
Appendix C: Sample Scripts C--1.................................
HCI Terminal Scripts C--1.............................................
Glossary
Index

Table of Contents
ii BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
List of Figures
Figure 1--1: The Bluetooth Protocol Analyzer
data acquisition window 1--4.................................
Figure 1--2: Acquisition Set up dialog box 1--9......................
Figure 1--3: Select Master and Select Slave dialog boxes 1--11..........
Figure 1--4: Acquisition window Sync Bar 1--12.....................
Figure 1--5: Data Filter set up dialog box 1--14......................
Figure 1--6: Low Level Trigger Setup dialog box 1--16................
Figure 1--7: Customize Pattern dialog box 1--19.....................
Figure 1--8: High Level Trigger Setup dialog box 1--22...............
Figure 1--9: Pre-Post Trigger Buffer set up dialog box 1--23...........
Figure 1--10: The Bluetooth Protocol Analyzer data analysis window 1--28
Figure 1--11: List view context-sensitive menu 1--36..................
Figure 2--1: Analysis window showing bookmarked packets 2--1......
Figure 2--2: Bookmarks dialog box 2--2...........................
Figure 2--3: Error Packet Generator dialog box 2--4.................
Figure 2--4: Error Name drop-down list box 2--5....................
Figure 2--5: Custom error dialog boxes 2--6........................
Figure 2--6: Available Patterns drop-down list box 2--6..............
Figure 2--7: Standard packet format 2--7..........................
Figure 2--8: Analyzer display of generated error 2--8................
Figure 2--9: Decryption dialog box 2--9............................
List of Tables
Table 1--1: Acquisition window menus and toolbar buttons 1--5......
Table 1--2: Analysis window menus and toolbar buttons 1--29.........
Table 1--3: Packet tabs 1--35.....................................
Table A--1: Air probe characteristics A--1.........................
Table A--2: Environmental characteristics A--1.....................
Table A--3: Certifications and compliances A--2....................
Table A--4: Physical characteristics A--3...........................

BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
iii
General Safety Summary
Review the following safety precautions to avoid injury and prevent damage to
this product or any products connected to it. To avoid potential hazards, use this
product only as specified.
Only qualified personnel should perform service procedures.
Observe All Terminal Ratings. Connect the ground lead of the probe to earth
ground only.
Do Not Operate With Suspected Failures. If you suspect there is damage to this
product, have it inspected by qualified service personnel.
Do Not Operate in Wet/Damp Conditions.
Do Not Operate in an Explosive Atmosphere.
Keep Product Surfaces Clean and Dry.
Terms in this Manual. These terms may appear in this manual:
WARNING. Warning statements identify conditions or practices that could result
in injury or loss of life.
CAUTION. Caution statements identify conditions or practices that could result in
damage to this product or other property.
Symbols on the Product. The following symbols may appear on the product:
CAUTION
Refer to Manual
ToAvoidFireor
Personal Injury
Symbols and Terms

General Safety Summary
iv BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001

BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
v
Preface
This manual provides operating information for the Tektronix BPA105 Bluetooth
Protocol Analyzer and is organized into the following sections:
HOperating Basics provides basic instructions for operating the Tektronix
Bluetooth Protocol Analyzer.
HReference provides detailed information on acquiring and analyzing piconet
packet data.
HAppendix A: Specifications provides hardware specifications and regulatory
statements.
HAppendix B: Accessories lists the standard accessories.
HAppendix C: Sample Scripts provides sample HCI scripts.
HGlossary explains the terms used in this manual.
Reference Documents
The following third-party reference documents provide additional information:
HHCI Terminal Guide (Digianswer #00-11-03) provides information about
using a HCI terminal as an interface with Bluetooth hardware.
HBluetooth Revealed (Prentice Hall, Inc., ISBN 0-13-090294-2) provides
background on several areas including the basic technology, the Bluetooth
specification with information about the protocol stack, Bluetooth profiles,
and the future of the technology.
HBluetooth: Connect without Cables (Prentice Hall, Inc.,
ISBN 0-13-089840-6) provides less background about the technology and
more in-depth information about the protocol stack and other areas. This
book provides many diagrams.
NOTE. Check for regular BPA Series software updates at www.tektronix.com/
bpa_software.

Preface
vi BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
Contacting Tektronix
Phone [phone]*
Address Tektronix, Inc.
Department or name (if known)
14200 SW Karl Braun Drive
P.O. Box 500
Beaverton, OR 97077
USA
Web site www.tektronix.com
Sales support 1-800-833-9200, select option 1*
Service support 1-800-833-9200, select option 2*
Technical support Email: [e-mail]
1-800-833-9200, select option 3*
6:00 a.m. -- 5:00 p.m. Pacific time
*This phone number is toll free in North America. After office hours, please
leave a voice mail message.
Outside North America, contact a Tektronix sales office or distributor; see the
Tektronix web site for a list of offices.

Operating Basics

BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
1-1
Acquiring Piconet Packet Data
This section introduces you to the basic operation of the Bluetooth Protocol
Analyzer. This section contains information on the following topics:
HMonitoring a piconet
HPiconet operating modes
HUnderstanding the data collection process
HUnderstanding the application window
HUsing the menu and toolbars
HSetting up an acquisition
HSetting up the data filter
HSetting up triggers
HStarting and ending a logging session
HSaving a log session
HUsing the HCI Terminal application
Overview
Using the Bluetooth Protocol Analyzer you can connect to and monitor the
activity of a Bluetooth piconet and log data containing all of the baseband
packets transmitted between the participating Bluetooth devices.
Following data collection, you can display the contents of the files you saved
during acquisition and use the analysis features of the Bluetooth Protocol
Analyzer to further interpret the data. Detailed information on data analysis is
provided in the Analyzing Piconet Packet Data section, beginning on page 1--27.
Additionally, the Bluetooth Protocol Analyzer has features that allow you to
generate baseband packets containing known errors for testing purposes.
Information on error packet generation can be found on page 2--3.

Acquiring Piconet Packet Data
1-2 BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
You can operate the Bluetooth Protocol Analyzer in either Independent or
Piconet mode.
Independent Mode. Configured as an independent unit, the Bluetooth Protocol
Analyzer does not interact directly in the piconet. Instead, after synchronizing to
the net, it passively monitors and logs all baseband packets transmitted between
the master and the slaves comprising the piconet. By using the advanced
triggering and filter features, you can identify the data you want to log and then
analyze it following the session.
Piconet Mode. Configured as a participant in the piconet, the Bluetooth Protocol
Analyzer uses a full-protocol stack and participates as the master or a slave in the
piconet.
As a master, the Bluetooth Protocol Analyzer logs all baseband packets between
itself and the piconet slave device(s). When set up as a slave, it logs all packets
between itself and the piconet master as well as between the master and all other
slave devices.
For information on how to configure the analyzer for independent or piconet
mode operation, see Logging Mode on page 1--9.
Collecting Data
With the Bluetooth Protocol Analyzer you can connect to and create a log
containing all the baseband packets transmitted between Bluetooth devices in a
piconet. Using the analyzer features you can do the following:
HOperate as a member of a piconet, as a stand-alone (independent) unit, or
independent with data decryption.
HSelect the master or slave to which the Bluetooth Protocol Analyzer is
synchronized.
HSet the duration over which the Protocol Analyzer tries to synchronize to a
piconet master.
HCapture all baseband packets transmitted within a Bluetooth piconet,
including packets that are normally not visible to the host such as retrans-
mitted packets. View the status of each packet and estimated the clock and
hop frequency.
HSelect specified hopping patterns: Europe/USA, Japan, France, or Spain.
HTransmit and receive on a single user-defined frequency.
HSet a correlation value.
Operating Mode

Acquiring Piconet Packet Data
BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
1-3
HTurn data whitening on and off.
HOutput data to a log file or view as a real-time display.
HStart or stop a logging session manually.
HEnable data decryption in Independent mode.
HDisplay the paging sequence in Independent mode.
HFilter packets during data acquisition (prior to logging), such as ID, NULL,
POLL, and Access Error packets.
HGenerate known errors for testing and debugging.
NOTE. When you use the Bluetooth Protocol Analyzer with Bluetooth Neighbor-
hood, you must use the Piconet mode (working as a participant in a piconet).
When you use the Bluetooth Protocol Analyzer in the Independent mode
(working as a passive listener), you cannot use it with Bluetooth Neighborhood.

Acquiring Piconet Packet Data
1-4 BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
Understanding the Data Acquisition Window
Figure 1--1 shows the data acquisition window of the Bluetooth Protocol
Analyzer. and identifies each of the functional areas. This is the window that is
displayed during data acquisition. Note that when the data acquisition window is
the active window, many of the toolbar buttons are disabled.
Menu bar Toolbar
Status bar Data window
Figure 1- 1: The Bluetooth Protocol Analyzer data acquisition window

Acquiring Piconet Packet Data
BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
1-5
The Menu Bar hosts the data acquisition and analysis functional menus. The
menus and menu selections vary depending on the current analyzer function.
Table 1--1 lists the menus that are available during data acquisition.
The toolbar contains shortcut buttons for the major analyzer functions. Most
toolbar buttons have corresponding menu selections in the Menu Bar. The
number and function of the available buttons varies, depending on the type of
window you have open. Table 1--1 identifies the acquisition toolbar buttons and
their functions.
The Status Bar provides useful information on the status of the Bluetooth
Protocol Analyzer. View this area for information on the current log session.
Table 1- 1: Acquisition window menus and toolbar buttons
Menu Selection Function
Toolbar
button Additional information
File > Open Use Windows Explorer to
browse and open a previously
saved log session.
See page 1--27.
Close Closeafile.
Save Saveafile.
Save As Open the Save As dialog box to
saveafiletoaspecifiedloca-
tion.
See page 1--24.
Search Files Search for a file.
Export Export data to a comma sepa-
rated file (.csv)
Properties Display properties of the active
data file.
Acquisition Summary Display acquisition details of the
active data file.
Send To Send the active file as email to
the mail profile you specify.
Print Print entire or partial contents of
theactivedatafile.
Print Preview Display a sample view of the the
data file selected for printing.
Print Setup Define the margins and other
printer properties for printing
data files.
Print Window Print the active window using
the Page Setup dialog box.
Menu Bar
Toolbars
Status Bar

Acquiring Piconet Packet Data
1-6 BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
Table 1- 1: Acquisition window menus and toolbar buttons (Cont.)
Menu Additional information
Toolbar
button
FunctionSelection
1, 2, 3... Reopen a recently opened file.
Exit Quit the Bluetooth Protocol
Analyzer application
System > Start Session Begin an acquisition session
using the criteria defined in the
Acquisition Setup dialog box.
Stop Session End the current acquisition
session.
Pause Click to suspend the current
acquisition session. Click again
to resume the session.
System Properties Display BPA105 version and
copyright information.
Tools > Access executable files set up
with the Tools tab of the System
Options dialog box.
Options Define packet type display
colors; define disk location for
storing acquisition log files;
identify executable files to be
run from the System > Tools
menu.
Default Return the factory default set-
tings for the following: acquisi-
tion setup, data files, pre- post--
trigger, error packet generation.
Acquisition > Setup Define parameters for the next
acquisition session.
See page 1--9.
Data Filter Specify the packets you do not
want to acquire during the next
acquisition session in the Data
Filter dialog box. These settings
become the default settings.
See page 1--14.
Enable Data Filter Activate/deactivate the Data
Filter dialog box settings.
Pre-Post Trigger Buffer Set the number of packets
collected before and after a
trigger event in the Pre-Post
Trigger Buffer dialog box.
Unless enabled, the post-trigger
buffer size is limited only by the
disk space available on your PC.
See page 1--23 for additional
information.

Acquiring Piconet Packet Data
BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
1-7
Table 1- 1: Acquisition window menus and toolbar buttons (Cont.)
Menu Additional information
Toolbar
button
FunctionSelection
Low Level Trigger Define trigger events for the
next acquisition based on low-
level trigger characteristics, such
as FLOW, ARQN, hop frequen-
cy, payload headers, etc.
See page 1--15.
Enable Low Level Trigger Enable/disable settings defined
in the Low Level Trigger Setup
dialog box.
High Level Trigger Define the trigger events for the
next acquisition base on high-
level trigger characteristics, such
as RFCOMM and SDP proto-
cols.
See page 1--22.
Enable High Level Trigger Enable/disable settings defined
in the High Level Trigger Setup
dialog box.
Error Packet Generation Set error packet generation
sequences for testing and
debugging, such as FLOW,
ARQN, hopping frequency,
payload headers, etc.
See page 2--3.
Enable Error Packet Generation Enable/disable settings defined
in the Error Packet Generator
dialog box.
View > Toolbar Enable/disable the toolbar. See Figure 1--1 on page 1--4.
Status bar Enable/disable the status bar.
Sync Bar Enable/disable the synchroniza-
tion information bar.
Contains status LEDs.
Session Info Bar Enable/disable the session
information bar.
Displays time stamps.
Show/Hide Packets Define which packets you want
to display in the List views.
Show/Hide Columns Define which columns you want
to display in the List views.
Format Columns Define the data format of the
displayed columns: decimal,
hex, binary, ASCII.
Help > Topics Display online help contents
main menu.
Help on window Display the help topic for the
active window.

Acquiring Piconet Packet Data
1-8 BPA105 Bluetooth Protocol Analyzer User Manual -- COMPANY CONFIDENTIAL
1/2001
Table 1- 1: Acquisition window menus and toolbar buttons (Cont.)
Menu Additional information
Toolbar
button
FunctionSelection
What’s This? Point to an element in the
display window and obtain a
help topic.
Technical Support Access the Tektronix Bluetooth
Protocol Analyzer technical
support Web site.
Download drivers and software
updates. Obtain product-related
technical information.
Customer Feedback Obtain a request for feedback,
thank you, and the product
support Web site.
About Tektronix Bluetooth
Protocol Analyzer
Display Bluetooth Protocol
Analyzer software version and
copyright.
The data window displays information on the traffic you are currently logging
(acquiring). Data windows are either acquisition windows (during data collec-
tion) or analysis windows (when you are displaying the contents of a saved
acquisition file). See Analyzing Piconet Packet Data beginning on page 1--27 for
more information on analysis windows.
At the bottom of the data windows the Session Info toolbar displays the
following information:
HStart and end times of the last acquisition session
HNumber of baseband packets logged
HLog size
HDate
Data Window