Teledyne Lecroy Frontline BPA 600 Mounting instructions

Hardware and Software User Manual
Revision Date: 3/14/2017

Copyright © 2017 Teledyne LeCroy, Inc.
Frontline, Frontline Test System, ComProbe Protocol Analysis System and ComProbe are registered
trademarks of Teledyne LeCroy, Inc.
The following are trademarks of Teledyne LeCroy, Inc.
lBPA 600™
lAudio Expert System™
lAudio Rating Metric™
lProbeSync™
The Bluetooth SIG, Inc. owns the Bluetooth® word mark and logos, and any use of such marks by Teledyne
LeCroy, Inc. is under license.
All other trademarks and registered trademarks are property of their respective owners.
TELEDYNE LECROY
i Frontline BPA 600 Hardware & Software User Manual

Contents
Chapter 1 Frontline Hardware & Software 1
1.1 What is in this manual 2
1.2 Computer Minimum System Requirements 2
1.3 Software Installation 2
Chapter 2 Getting Started 3
2.1 BPA 600 Hardware 3
2.1.1 Attaching Antennas 3
2.1.2 Connecting/Powering the Frontline BPA 600 Hardware 4
2.1.3 BPA 600 ProbeSync 4
2.2 Data Capture Methods 5
2.2.1 Opening Data Capture Method 5
2.2.2 Frontline BPA 600 Data Capture Methods 7
2.2.3 Frontline ProbeSync™ for Coexistence and Multiple Frontline Device Capture 8
2.2.4 Virtual Sniffing 8
2.3 Control Window 9
2.3.1 Control Window Toolbar 9
2.3.2 Configuration Information on the Control Window 10
2.3.3 Status Information on the Control Window 10
2.3.4 Frame Information on the Control Window 11
2.3.5 Control Window Menus 11
2.3.6 Minimizing Windows 15
Chapter 3 Configuration Settings 16
3.1 BPA 600 Configuration and I/O 16
3.1.1 BPA 600 - Update Firmware 16
3.1.2 BPA 600 IO Datasource Settings 17
3.2 Decoder Parameters 40
3.2.1 Decoder Parameter Templates 42
3.2.2 Selecting A2DP Decoder Parameters 44
3.2.3 AVDTP Decoder Parameters 44
3.2.4 L2CAP Decoder Parameters 48
3.2.5 RFCOMM Decoder Parameters 50
3.3 Mesh Security 53
3.4 Conductive Testing 58
TELEDYNE LECROY
Frontline BPA 600 Hardware & Software User Manual ii

3.4.1 Classic Bluetooth Transmitter Classes 58
3.4.2 Bluetooth low energy Transmitter 59
3.4.3 BPA 600 Conductive Testing 59
3.4.4 Bluetooth Conductive Test Process 60
Chapter 4 Capturing and Analyzing Data 62
4.1 Capture Data 62
4.1.1 Air Sniffing: Positioning Devices 62
4.1.2 Capturing Data with BPA 600 Analyzer 65
4.1.3 Combining BPA 600, 802.11, and HSU with ProbeSync 68
4.1.4 Extended Inquiry Response 70
4.2 Protocol Stacks 71
4.2.1 Protocol Stack Wizard 71
4.2.2 Creating and Removing a Custom Stack 72
4.2.3 Reframing 73
4.2.4 Unframing 73
4.2.5 How the Analyzer Auto-traverses the Protocol Stack 74
4.2.6 Providing Context For Decoding When Frame Information Is Missing 74
4.3 Analyzing Protocol Decodes 75
4.3.1 The Frame Display 75
4.3.2 Bluetooth Timeline 111
4.3.3 low energy Timeline 126
4.3.4 Coexistence View 143
4.3.5 Message Sequence Chart (MSC) 172
4.4 Packet Error Rate Statistics 182
4.4.1 Packet Error Rate - Channels (Classic and low energy) 183
4.4.2 Packet Error Rate - Pie Chart and Expanded Chart 185
4.4.3 Packet Error Rate - Legend 186
4.4.4 Packet Error Rate - Additional Statistics 187
4.4.5 Packet Error Rate - Sync Selected Packets With Other Windows 187
4.4.6 Packet Error Rate - Export 188
4.4.7 Packet Error Rate - Scroll Bar 188
4.4.8 Packet Error Rate - Excluded Packets 190
4.5 Bluetooth Audio Expert System™ 190
4.5.1 Supported Codec Parameters 192
TELEDYNE LECROY
iii Frontline BPA 600 Hardware & Software User Manual

4.5.2 Starting the AudioExpert System (BPA 600 only) 192
4.5.3 Operating Modes 193
4.5.4 Audio Expert System™ Event Type 200
4.5.5 Audio Expert System™ Window 208
4.5.6 Frame, Packet, and Protocol Analysis Synchronization 222
4.6 Bluetooth Protocol Expert System 223
4.6.1 Starting the Bluetooth Protocol Expert System 223
4.6.2 Bluetooth Protocol Expert System Window 224
4.7 Analyzing Byte Level Data 232
4.7.1 Event Display 232
4.7.2 The Event Display Toolbar 232
4.7.3 Opening Multiple Event Display Windows 234
4.7.4 Calculating CRCs or FCSs 234
4.7.5 Calculating Delta Times and Data Rates 234
4.7.6 Switching Between Live Update and Review Mode 235
4.7.7 Data Formats and Symbols 235
4.8 Data/Audio Extraction 239
Chapter 5 Navigating and Searching the Data 243
5.1 Find 243
5.1.1 Searching within Decodes 244
5.1.2 Searching by Pattern 246
5.1.3 Searching by Time 247
5.1.4 Using Go To 249
5.1.5 Searching for Special Events 251
5.1.6 Searching by Signal 252
5.1.7 Searching for Data Errors 254
5.1.8 Find - Bookmarks 257
5.1.9 Changing Where the Search Lands 258
5.1.10 Subtleties of Timestamp Searching 258
5.2 Bookmarks 259
5.2.1 Adding, Modifying or Deleting a Bookmark 259
5.2.2 Displaying All and Moving Between Bookmarks 260
Chapter 6 Saving and Importing Data 262
6.1 Adding Comments to a Capture File 262
TELEDYNE LECROY
Frontline BPA 600 Hardware & Software User Manual iv

6.2 Confirm Capture File (CFA) Changes 262
6.3 Loading and Importing a Capture File 263
6.3.1 Loading a Capture File 263
6.3.2 Importing Capture Files 263
6.4 Printing 264
6.4.1 Printing from the Frame Display/HTML Export 264
6.4.2 Printing from the Event Display 266
6.5 Exporting 267
6.5.1 Frame Display Export 267
6.5.2 Exporting a File with Event Display Export 268
Chapter 7 General Information 271
7.1 System Settings and Progam Options 271
7.1.1 System Settings 271
7.1.2 Changing Default File Locations 274
7.1.3 Side Names 276
7.1.4 Timestamping 277
7.2 Technical Information 279
7.2.1 Performance Notes 279
7.2.2 BTSnoop File Format 280
7.2.3 Ring Indicator 282
7.2.4 Progress Bars 283
7.2.5 Event Numbering 283
7.2.6 Useful Character Tables 283
7.2.7 DecoderScript Overview 285
7.2.8 Bluetooth low energy ATT Decoder Handle Mapping 286
Contacting Frontline Technical Support 287
Appendicies 289
Appendix A: Application Notes 290
A.1 Audio Expert System: aptX 'hiccup' Detected 291
A.1.1 Background 291
A.1.2 Test Setup 291
A.1.3 Discussion 292
A.1.4 Conclusions 295
A.2 Getting the Android Link Key for Classic Decryption 297
TELEDYNE LECROY
v Frontline BPA 600 Hardware & Software User Manual

A.2.1 What You Need to Get the Android Link Key 297
A.2.2 Activating Developer options 297
A.2.3 Retrieving the HCI Log 298
A.2.4 Using the ComProbe Software to Get the Link Key 299
A.3 Decrypting Encrypted Bluetooth®data with ComProbe BPA 600 303
A.3.1 How Encryption Works in Bluetooth 303
A.3.2 Legacy Pairing (Bluetooth 2.0 and earlier) 303
A.3.3 Secure Simple Pairing (SSP) (Bluetooth 2.1 and later) 305
A.3.4 How to Capture and Decrypt Data (Legacy Pairing) 305
A.3.5 How to tell if a device is in Secure Simple Pairing Debug Mode 307
A.4 Decrypting Encrypted Bluetooth® low energy 311
A.4.1 How Encryption Works in Bluetooth low energy 311
A.4.2 Pairing 311
A.4.3 Pairing Methods 312
A.4.4 Encrypting the Link 313
A.4.5 Encryption Key Generation and Distribution 313
A.4.6 Encrypting The Data Transmission 314
A.4.7 Decrypting Encrypted Data Using Frontline® BPA 600 low energy Capture 314
A.5 Bluetooth® low energy Security 321
A.5.1 How Encryption Works in Bluetooth low energy 322
A.5.2 Pairing 322
A.5.3 Pairing Methods 323
A.5.4 Encrypting the Link 324
A.5.5 Encryption Key Generation and Distribution 324
A.5.6 Encrypting The Data Transmission 325
A.5.7 IRK and CSRK Revisited 325
A.5.8 Table of Acronyms 326
A.6 Bluetooth Virtual Sniffing 327
A.6.1 Introduction 327
A.6.2 Why HCI Sniffing and Virtual Sniffing are Useful 327
A.6.3 Bluetooth Sniffing History 328
A.6.4 Virtual Sniffing—What is it? 328
A.6.5 The Convenience and Reliability of Virtual Sniffing 329
A.6.6 How Virtual Sniffing Works 329
TELEDYNE LECROY
Frontline BPA 600 Hardware & Software User Manual vi

A.6.7 Virtual Sniffing and Bluetooth Stack Vendors 329
A.6.8 Case Studies: Virtual Sniffing and Bluetooth Mobile Phone Makers 330
A.6.9 Virtual Sniffing and You 330
TELEDYNE LECROY
vii Frontline BPA 600 Hardware & Software User Manual

Chapter 1 Frontline Hardware & Software
Frontline Test Equipment family of protocol analyzers work with the following technologies.
lClassic Bluetooth
lBluetooth low energy
lDual Mode Bluetooth (simultaneous Classic and low energy)
lBluetooth Coexistence: Bluetooth with 802.11 Wi-Fi
lBluetooth HCI (USB, SD, High Speed UART)
lNFC
l802.11 (Wi-Fi)
lSD
lHSU (High Speed UART)
The Frontline hardware interfaces with your computer that is running our robust software engine called the
ComProbe Protocol Analysis System or Frontline software. Whether you are sniffing the air or connecting
directly to the chip Frontline analyzers use the same powerful Frontline software to help you test,
troubleshoot, and debug communications faster.
Frontline software is an easy to use and powerful protocol analysis platform. Simply use the appropriate
Frontline hardware or write your own proprietary code to pump communication streams directly into the
Frontline software where they are decoded, decrypted, and analyzed. Within the Frontline software you see
packets, frames, events, coexistence, binary, hex, radix, statistics, errors, and much more.
This manual is a user guide that takes you from connecting and setting up the hardware through all of the
Frontline software functions for your Frontline hardware. Should you have any questions contact the
Frontline Technical Support Team.
Frontline BPA 600 Hardware & Software User Manual 1

1.1 What is in this manual
The Frontline User Manual comprises the following seven chapters. The chapters are organized in the
sequence you would normally follow to capture and analyze data: set up, configure, capture, analyze, save.
You can read them from beginning to end to gain a complete understanding of how to use the Frontline
hardware and software or you can skip around if you only need a refresher on a particular topic. Use the
Contents, Index, and Glossary to find the location of particular topics.
lChapter 1 Frontline Hardware and Software. This chapter will describe the minimum computer
requirements and how to install the software.
lChapter 2 Getting Started. Here we describe how to set up and connect the hardware, and how to apply
power. This chapter also describes how to start the Frontline software in Data Capture Methods. You will
be introduced to the Control window that is the primary operating dialog in the Frontline software.
lChapter 3 Configuration Settings. The software and hardware is configured to capture data. Configuration
settings may vary for a particular Frontline analyzer depending on the technology and network being
sniffed. There are topics on configuring protocol decoders used to disassemble packets into frames and
events.
lChapter 4 Capturing and Analyzing Data. This Chapter describes how to start a capture session and how
to observe the captured packets, frames, layers and events.
lChapter 5 Navigating and Searching the Data. Here you will find how to move through the data and how
to isolate the data to specific events, often used for troubleshooting device design problems.
lChapter 6 Saving and Importing Data. When a live capture is completed you may want to save the
captured data for future analysis, or you may want to import a captured data set from another developer
or for use in interoperability testing. This chapter will explain how to do this for various data file formats.
lChapter 7 General Information. This chapter provides advanced system set up and configuration
information, timestamping information, and general reference information such as ASCII, baudot, and
EBCDIC codes. This chapter also provides information on how to contact Frontline's Technical Support
team should you need assistance.
1.2 Computer Minimum System Requirements
Frontline supports the following computer systems configurations:
lOperating System: Windows 7/8/10
lUSB Port: USB 2.0 High-Speed or or later
The Frontline software must operate on a computer with the following minimum characteristics.
lProcessor: Core i5 processor at 2.7 GHz
lRAM: 4 GB
lFree Hard Disk Space on C: drive: 20 GB
1.3 Software Installation
Download the installation software from FTE.com. Once downloaded, double-click the installer and follow the
directions.
Use this link: http://www.fte.com/bpa600-soft.
TELEDYNE LECROY Chapter 1 Frontline Hardware & Software
2 Frontline BPA 600 Hardware & Software User Manual