Computer Access Technology BT006UAA-X Bluetooth Protocol Analyzer User Manual 01 Merlinii

Computer Access Technology Corporation Bluetooth Protocol Analyzer 01 Merlinii

Contents

User Manual 1 of 2

3385 Scott Blvd, Santa Clara, CA 95054-3115 Tel: +1/408.727.6600 Fax: +1/408.727.6622
For Software Version 2.30
Manual Version 1.0
28 November, 2003
CATC Merlin II
Bluetooth Protocol Analyzer
User’s Manual
ii
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Document Disclaimer
The information contained in this document has been carefully checked and
is believed to be reliable. However, no responsibility can be assumed for
inaccuracies that may not have been detected.
CATC reserves the right to revise the information presented in this
document without notice or penalty.
Trademarks and Servicemarks
CATC, Merlin II, BTTracer, BTTrainer, Merlin, Merlin’s Wand, Merlin
Mobile, and BusEngine are trademarks of Computer Access Technology
Corporation.
Microsoft, Windows NT, Windows 2000, Windows 98SE, Windows ME, and
Windows XP are registered trademarks of Microsoft Inc.
All other trademarks are property of their respective companies.
Copyright
Copyright © 2003, Computer Access Technology Corporation (CATC); All
Rights Reserved.
Portions of this product are supplied courtesy of Richard Herveille.
Copyright (c) 2002, 2003 Richard Herveille, rherveille@opencores.org. All
rights reserved.
This document may be printed and reproduced without additional
permission, but all copies should contain this copyright notice.
FCC Conference Statement
This equipment has been tested and found to comply with the limits for a
Class A digital device and an intentional radiator, pursuant to Part 15 of the
FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate
radio frequency energy and, if not installed and used in accordance with the
instruction manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely
to cause harmful interference in which case the user will be required to
correct the interference at their own expense. The end user of this product
should be aware that any changes or modifications made to this equipment
without the approval of CATC could result in the product not meeting the
Class A limits, in which case the FCC could void the user's authority to
operate the equipment.
iii
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Important Notice: To comply with FCC RF exposure requirements
(sections 1.1307 and 1.310 of the Rules) only the antenna supplied by
CATC must be used for this device. The antenna must be located at least 20
cm away from all persons.
FCC Testing applies to FCC ID: KH7BT006UAA-X.
EU Conference Statement
This equipment complies with the R&TT Directive 1999/5/EC. It has been
tested and found to comply with EN55022:1994/A1:1995/A2:1997 Class A,
EN61000-4-2:1995, EN61000-4-3:1995, EN61000-4-4:1995,
EN61000-4-5:1995, EN61000-4-6:1995, EN61000-4-11:1994,
EN61010-1:1993, and ESTI EN 300 328-1 V1.2.2 (2000-07).
Manual Version 1.0 Part number: 730-0055-00
iv
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
1
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
TABLE OF CONTENTS
Chapter 1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Bluetooth™ Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1
General Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Automation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Physical Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
Recording Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
Bluetooth BusEngine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
Environmental Conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
External Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
Chapter 2 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
System Components/Packing List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Analyzer LED Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Rear Panel Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Setting Up the Analyzer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Installing the Analyzer Software on the PC. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Your First Bluetooth Recording. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Inquiry Recording . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
External Interface Breakout Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Connecting the Breakout Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Configuring the Analyzer for the Breakout Board . . . . . . . . . . . . . . . . .14
Chapter 3 Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Update Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Automatic Updates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Software, Firmware, and BusEngine Versions . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Software Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
License Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Updating the Software License . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Chapter 4 Software Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
The Main Display Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Toolbar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
Status Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Recording Progress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Status Bar Position Definitions: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Recording Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Analyzer Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Search Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
2
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Zooming In and Out . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Zoom In. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Zoom Out . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Tool Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Merlin II Analyzer Keyboard Shortcuts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Chapter 5 Recording Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Starting Recording Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Recording a Traffic on a New Piconet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Recording an Existing Piconet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Recording in Test Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Recording in Reduced Hopping Mode . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Recording in Single Frequency Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
Chapter 6 Recording Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Recording Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Piconet recording . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63
Inquiry recording . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
UT:HCI mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Opening the Recording Options Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Recording Options - General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65
Recording type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Buffer Size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Trigger Position . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66
Debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Recording Options - Piconet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
Frequency Hopping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Synchronization Method. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Loss of Sync Timeout (1-30 secs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Force Re-synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Show Paging Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Follow Anonymity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Advanced ... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Recording Options - Inquiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76
Recording Options - Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Payload Length Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .84
Recording Options - Actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Action Buttons - Their Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Blue Dot Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88
Saving Recording Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92
Recording Bluetooth Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
Chapter 7 Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
General Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96
Setting Color, Formatting, and Hiding Options . . . . . . . . . . . . . . . . . . . . . . . . . . 97
3
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Setting Color Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Changing Field Formats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Hiding Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Level Hiding Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Level Hiding Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Saving Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101
Chapter 8 Reading a CATC Trace . . . . . . . . . . . . . . . . . . . . . . . 103
Trace View Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Interpreting the Displayed Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
Tooltips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
Set Marker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
Edit or Clear Marker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105
Adding Comments to a Trace File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Expanded and Collapsed Data Formats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Hide Frequency Hops. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Hide Nulls and Polls. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Menus in Clicked Fields. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Hide Unassociated Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Hide Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109
Hide Duplicated Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Chapter 9 Searching Traces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Search Menu. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Go to Trigger. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Go to Packet/Message/Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Go to Marker. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Go to . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Soft Bit Error. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Loss of Sync . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Find . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Event Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Union, Intersection, and Exclusion. . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Using Find. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
Find Next . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
Chapter 10 Decoding Protocols. . . . . . . . . . . . . . . . . . . . . . . . . . 125
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
LMP and L2CAP Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Decoding and Viewing Higher Protocol Data . . . . . . . . . . . . . . . . . . . . . . . . . . 126
Decoding Via the Decoding Toolbar . . . . . . . . . . . . . . . . . . . . . . . . . . 126
Decoding Via the Display Options Dialog Box . . . . . . . . . . . . . . . . . . 127
Tooltips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
Viewing Packets in LMP and L2CAP Messages. . . . . . . . . . . . . . . . . . . . . . . . 128
Types of LMP and L2CAP Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Viewing L2CAP Channel Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129
4
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Viewing Protocol Messages and Transactions. . . . . . . . . . . . . . . . . . . . . . . . . . 130
Viewing L2CAP Messages in Protocol Messages . . . . . . . . . . . . . . . . 130
How to Decode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
Expanding Protocol Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
Decoding via the Profiles Toolbar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131
Changing Protocol Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
Using the Decoding Assignments Dialog Box . . . . . . . . . . . . . . . . . . . 132
Removing User-Assigned Protocol Assignments. . . . . . . . . . . . . . . . . 133
Manually Assigning Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Other Assignments: OBEX Client/Server Status . . . . . . . . . . . . . . . . . 134
Changing an OBEX Client or Server Status . . . . . . . . . . . . . . . . . . . . . 135
Decoding BNEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135
Decoding HID. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
Other Decoding Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .136
Configuring Merlin II for Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . 136
Re-applying Encryption Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
Chapter 11 Reports & Exporting Data . . . . . . . . . . . . . . . . . . . 141
Device List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
File Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142
Error Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
Timing Calculations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143
Bus Utilization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
Traffic Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Real-Time Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Exporting Trace Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
Exporting To Text Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .150
Exporting Trace Data to a .CSV Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
Exporting Audio Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152
Appendix A: Merlin II Clock Calibration . . . . . . . . . . . . . . . . . 153
Procedure: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
How to Contact CATC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157
Limited Hardware Warranty . . . . . . . . . . . . . . . . . . . . . . . . . . . 157
1
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
1. Overview
The CATC Merlin II™ Protocol Analyzer is the newest member of CATC's
industry-leading line of high performance, Bluetooth protocol analyzers.
Preceded by CATC’s BTTracer, Merlin and Merlin Mobile Analyzers,
Merlin II has been designed using the same modular architecture that made
its predecessors highly successful in the serial bus protocol analyzer market
worldwide.
1.1 Bluetooth™ Overview
The Bluetooth wireless technology is set to revolutionize the personal
connectivity market by providing freedom from wired connections. It is a
specification for a small-form factor, low-cost radio solution providing links
between mobile computers, mobile phones and other portable handheld
devices, and connectivity to the internet.
The Bluetooth Special Interest Group (SIG), comprised of leaders in the
telecommunications, computing, and network industries, is driving
development of the technology and bringing it to market. The Bluetooth
SIG includes promoter companies 3Com, Ericsson, IBM, Intel, Lucent,
Microsoft, Motorola, Nokia and Toshiba, and more than 2500 SIG
members.
Bluetooth is a radio technology specification designed to transmit both
voice and data wirelessly, providing an easier way for a variety of mobile
computing, communications and other devices to communicate with one
another without the need for cables. Bluetooth could make possible what is
being called the personal-area network by allowing users to transmit small
amounts of data at 1M bit/sec with a range of 10 to 100 meters, depending
the power of the radio, over the 2.4-GHz radio frequency. The key benefits
of the Bluetooth technology are robustness, low complexity, low power and
low cost. Bluetooth employs a rapid frequency hopping mechanism to
minimize the effects of ‘collisions’ with other protocols and devices
operating in the same frequency band. Mechanisms exist for a Bluetooth
device to determine all devices in range as well as to request connection to
a piconet as either a master or a slave.
Please refer to the Bluetooth Specification, version 1.2 for details on the
protocol. The Bluetooth specification is available from the Bluetooth SIG at
its web site http://www.bluetooth.org/
2
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
1.2 General Description
The Merlin II Protocol Analyzer is designed as a stand-alone unit that can
be easily configured and controlled by a portable or desktop PC connected
via its USB port. Merlin II provides customers with the familiar ‘CATC
Trace’ user interface that is the de facto industry standard for documenting
the performance of high-speed serial protocols.
Merlin II supports the functionality required to analyze all levels, including
the baseband, of the Bluetooth wireless protocol. The featured Radio
Interface allows users to probe and analyze transactions at the lowest level
within the Bluetooth architecture. By creating this "Point of Observation" or
probing point within the radio level packet view, the user can analyze all
levels of the protocol stack.
Merlin II is a non-intrusive testing tool for Bluetooth piconets providing
network traffic capture and analysis. Hardware triggering allows real-time
events to be captured from a piconet. Hardware filtering allows the filtering
out of fields, packets, and errors from the recording. Filtering allows users
to focus recordings on events of interest and to preserve recording memory
so that the recording time can be extended.
Recorded data is presented in colored graphics in a trace viewer application.
This application has advanced search and viewing capabilities that allow the
user to quickly locate specific data, errors and other conditions, thereby
focussing the user’s attention on events of interest.
Merlin II functions with any personal computer using the Windows 98SE,
Windows 2000, Windows ME, or Windows XP operating systems and
equipped with a functional USB interface. For an updated set of system
requirements for the host machine, please refer to the readme file.
The Analyzer is configured and controlled through a personal computer
USB port. It can be used with portable computers for field service and
maintenance as well as with desktop units in a development environment.
The Analyzer is easily installed by connecting a cable between the
computer’s USB port and the Analyzer’s USB port.
Merlin II provides on-the-fly detection of and triggering on such events as
Packet Headers and Errors. Whether recording manually or with a specified
trigger condition, Merlin II continuously records the bus data in a
wrap-around fashion until manually stopped or until the Trigger Event is
detected and a specified post-Trigger amount of bus data is recorded.
Upon detection of a triggering event, the analyzer continues to record data
up to a point specified by the user. Real-time detection of events can be
individually enabled or disabled to allow triggering on events as they
3
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
happen. This includes predefined exception or error conditions and a
user-defined set of trigger events. The unit can also be triggered by an
externally supplied signal. The breakout board provides a path for externally
supplied trigger or timing data to be recorded along with bus traffic.
The breakout board also provides a path for Merlin II to transmit a trigger
signal.
The Merlin II software provides powerful search functions that enable
investigation of particular events and allow the software to identify and
highlight specific events. In addition to immediate analysis, you can print
any part of the data. Use the Save As feature to save the data on disk for later
viewing. The program also provides a variety of timing information and
data analysis reports.
1.3 Automation
The Merlin II software includes an Application Program Interface (API) for
developing testing programs and scripts in C++ and Visual Basic. The API
reproduces most of the commands embodied in the Merlin II trace viewer
software. This API allows users to automate procedures that otherwise have
to be run manually via the trace viewer software. The Automation API can
be run locally on the PC attached to Merlin II or remotely over a network
connection.
For further details, refer to the Automation API for CATC Bluetooth
Analyzers reference manual included in the installation CD-ROM. You can
also download the document from the CATC website.
1.4 Features
General
Small form factor for mobility and easy placement.
Flexible design - reconfigurable hardware for future enhancements.
User friendly - the Graphical User Interface software of Merlin II
Analyzer is designed to be consistent with the ‘CATC Trace’ using color
and graphics to display Bluetooth traffic.
Radio Level Point of Observation and Capture - traffic capture at the
Radio Level for comprehensive analysis.
Complies with Bluetooth v1.2 specification.
Supports point-to-point and point-to-multipoint Bluetooth piconets.
Spool data to hard drive allowing for long recording sessions.
4
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Automatic tracking of ESCO and Anonymity Modes.
Anonymity mode
Supports 79 frequency hop standards, reduced frequency, fixed
frequency, and AFH.
Automatic tracking of changes in the hopping scheme.
Automatic tracking of whitened and non-whitened packets and traffic.
Free non-recording, view-only software available.
Power-on self-diagnostics.
Compliant with FCC class A requirements / meets all CE mark
requirements.
Three year warranty and hot-line customer support.
Physical Components
Note For an updated description of requirements for the host machine, please refer to
the readme file.
External small "power brick"
Trace viewer software support for Microsoft Windows versions 98SE
and later.
Display Options
Analyzes and displays a transaction-level view of piconet traffic with
accurate time-stamps and frequency hop information.
Software analysis and data presentation at several protocol levels:
Baseband, LMP, HCI, L2CAP, SDP, RFCOMM, TCS, OBEX, HDLC,
BNEP, PPP, AT, HCRP, IP, TCP, UDP, HID, AVCTP, and AVDTP.
Supports the following profiles: GAP, CIP, CTP, HCRP, HID, Intercom
Profile, LPP, PAN, SDAP, SPP, UDI, DUN, FAX, GEOP, HF, HP,
LAN, PAP, SAP, VCP, BPP, BIP, FTP, OPP, Synchronization Profile,
GAVDP, A2DP, AVRCP, VDP
Recording Options
Flexible advanced triggering capabilities including - multiple triggering
modes, selective views, timing analysis, search functions, protocol
packet errors, transaction errors, packet type and destination device, data
patterns, or any of these trigger types in combination.
User defined trigger position.
Support for various piconet characteristics by enabling the user to
configure the synchronization method and recording parameters.
5
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Real-time hardware filtering of captured traffic for optimizing analyzer
memory usage.
Bluetooth BusEngine
CATC’s BusEngine™ Technology is at the heart of the new Merlin II
Analyzer. The revolutionary BusEngine core uses state-of-the-art FPGA
technology and incorporates both the real-time recording engine and the
configurable building blocks that implement data/state/error detection,
triggering, capture filtering, external signal monitoring and event counting
& sequencing. And like the flash-memory-based firmware that controls its
operation, all BusEngine logic is fully field upgradeable, using
configuration files that can be downloaded from the CATC Website.
6
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
1.5 Specifications
Package
Environmental Conditions
LEDs
External Power Supply
Width: 6.05 inches (15.5 cm)
Depth: 3.0 inches (7.6 cm)
Height: 1.07 inches (2.7 cm)
Weight: 8.8 oz (246 grams)
Connectors: DC power connection (for connecting the external power
supply)
Mini DIN
Host connection (USB, type ’B’)
Antenna (reverse polarity SMA)
Operating Range: 0 to 55 °C (32 to 131 °F)
Storage Range: -20 to 80 °C (-4 to 176 °F)
Humidity: 10 to 90%, non-condensing
Status (STATUS) Illuminates blue when the analyzer is functioning properly
Synchronized
(SYNC):
Flashes yellow during acquisition of the traffic hop
sequence, illuminate when analyzer is locked to the hop
sequence.
Recording (REC): Illuminates green when analyzer is actively recording data.
5V - 3 A
7
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
2. Installation
The Merlin II Protocol Analyzer components and software are easily
installed and quickly ready to run on most Windows-based personal
computer systems. You can begin making Bluetooth recordings after
following these initial steps.
2.1 System Components/Packing List
One stand-alone Merlin II Analyzer
One Antenna
One External Interface Breakout Board with a Mini DIN cable
One External Power Supply
One USB cable
Merlin II software program installation CD
User’s Manual
2.2 Analyzer LED Descriptions
The Merlin II analyzer has three LEDs. From left to right, these LEDs are:
ABlue Status indicator LED Blinks fast during initialization/power up.
Stead on if unit is functioning properly. Blinks slowly if a self-test fails..
BYellow Sync (Synchronize) LED (Flashing indicates that the analyzer is
tracking the defined slave or master device. Illuminated indicates that
the analyzer is tracking an active piconet.)
CGreen Rec (recording) LED (lights when the unit is recording).
2.3 Rear Panel Description
USB type "B" host computer connector
This connector links the analyzer to the PC that will be administering it.
Mini DIN Connector
This connector allows the analzyer to transmit and receive external signals
via a mini DIN cable to a Break Out Board for the purpose of triggering on
external input signals and for clock calibration.
Power connector for external power supply
This connectors is used to attach the external power supply.
8
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
2.4 Setting Up the Analyzer
To set up a Merlin II system,
Step 1 Attach the Antenna to the ANT connection point on the analyzer.
The antenna should point up.
Step 2 Connect the provided external power supply to the analyzer and then
to a 100-volt to 240-volt, 50 Hz to 60 Hz, 100 W power outlet.
Note At power-on, the analyzer initializes itself in approximately ten seconds and
performs an exhaustive self-diagnostic that lasts about five seconds. The status
LED flashes during the power-on testing and turns on steadily if the unit is
functioning properly when testing is finished. If the diagnostics fail, the status
LED blinks slowly, indicating a hardware failure. If this occurs, call CATC
Customer Support for assistance.
Step 3 Connect the USB cable between the USB port on the back of the
analyzer and a USB port on the analyzing PC.
The host operating system detects the analyzer and begins to install the USB
driver.
2.5 Installing the Analyzer Software on the PC
Once Merlin II has been recognized as a USB device, install the Merlin II
software on the PC administering the analyzer.
Step 1 Insert the Merlin II Suite CD into the CD ROM drive of the
PC that will be administering the Analyzer.
Step 2 Follow Windows on-screen Plug-and-Play instructions for the
automatic installation of the Merlin II Analyzer as a USB device on
your analyzing PC (the required USB files are included on the
Merlin II CD.
Step 3 Select Install Software from the installation CD and follow the
on-screen installation instructions.
The Merlin II application will install on the PC hard disk.
Step 4 To start the application, launch the CATC Merlin II program from
the Start Menu: Start>Programs>CATC>Merlin II.
9
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The Merlin II program opens.
The window shows a menu bar and toolbar at the top, a grey trace viewing
area covering most of the window, and a status bar at the bottom.
Opening a sample trace will cause most of the buttons on the toolbar to
become active.
To open a trace,
Step 1 Select File > Open from the menu. A dialog box opens.
Step 2 Select a file from the dialog box and click Open. A trace opens in
the main viewing area. When traffic has been recorded, it will
10
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
display here.
Note The software may be used with or without the analyzer box. When used without
an analyzer box attached to the computer, the program functions as a Trace
Viewer to view, analyze, and print captured protocol traffic.
2.6 Your First Bluetooth Recording
After installing and launching the software, you can test Merlin II by
creating an inquiry recording. In this test, Merlin II will issue a General
Inquiry that asks local devices to identify themselves. Merlin II then records
the responses.
Inquiry Recording
To create an inquiry recording, perform the following steps:
Step 1 Click the down-arrow on the right side of the
Record:Piconet button on the toolbar .
A sub-menu appears with options for Piconet Recording Mode, and Inquiry
Recording Mode.
Step 2 Select Inquiry Recording Mode.
The button changes appearance and shows the label Record: Inquiry
Step 3 From the menu, select Setup > Recording Options.
11
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The Recording Options dialog opens with the Inquiry page displaying.
Step 4 If desired, make any changes to the options, then click OK.
Step 5 Click the button (i.e. not the down-arrow.)
Merlin II starts to record the Bluetooth traffic immediately using the settings from
the Piconet page in the Recording Options dialog. The Bluetooth Inquiry process
will proceed for whatever amount of time is set for creating an Inquiry action (the
default is 11 seconds). After the inquiry time has elapsed, the analyzer will upload
the data and display the packets. In addition, the Device List window will open
and display the updated statuses of the devices.
The screen should look like the sample recording below which shows the FHS
packets generated during the Inquiry process.
12
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
When the recording session is finished, the bus traffic is saved to the hard drive as
a file named data.tfb or whatever name you assign as the default filename. While
the file is being saved, you should see a brown progress bar at the bottom of the
screen. When the bar turns white, it indicates that the data has been saved to disk.
Step 6 To save a current recording for future use, select File > Save As or
click on the tool bar.
You see the standard Save As screen.
Step 7 Give the recording a name and save it to the appropriate directory.
2.7 External Interface Breakout Board
The External Interface Breakout Board is an accessory that allows standard,
LV TTL signals to be connected to the analyzer for triggering. The breakout
board consists of two BNC connectors for "EXT IN" and "EXT OUT"
signals. The EXT IN connector can be used to import trigger signals from
13
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
other devices. the EXT OUT connector can be used to export trigger signals
to trigger other devices such as oscilloscopes or logic analyzers or to export
the external clock for clock calibration using a frequency counter (see
Appendix A).
Drive strength for all outputs is about 30mA high (@2V) and 60 mA low
(@0.5V). Inputs can handle 0 to 5.5V. Inputs above 2V are detected as logic
high; inputs below 0.8V are detected as logic low.
The analyzer connects to the first of three mini DIN ports ("Port 1") on the
Breakout Board. Each signaling pin is isolated by a 100 series resistor and
a buffer inside the Analyzer unit.
Please make sure that the jumpers JP1 and JP2 on the breakout board are set
to Position 1.
Connecting the Breakout Board
The photograph above shows a fully connected Merlin II.
The following connections can be seen: Left: Power supply connected to
the power port on the analyzer. Center: Mini DIN cable leading to Port 1
of the breakout board. USB cable leading to an offscreen PC. Right: BNC
cable leading from the Breakout board to an offscreen device on the left.
Mini DIN connectors on the back of the Break-out board.
Merlin II with power supply (left) and Breakout board (right).
14
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Configuring the Analyzer for the Breakout Board
To configure the analyzer for the breakout board, see See Section "External
Input Signals" on page 49, See Section "Setting External Output Options"
on page 68, and See Section "Specifying Pulse Signal Outputs" on page 69.
15
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
3. Updates
BusEngine and Firmware updates often need to be performed when you
update the Merlin II software. These updates can be performed
automatically or manually. Both processes are described.
3.1 Update Files
Update files are installed with the Merlin II software during the installation
procedure and reside in the local directory of the analyzer application.
During the update process, the files are taken from this location.
The following update files are provided with each release:
BusEngine - For updating the hardware logic (has an *.bin extension).
Firmware- For updating the platform firmware (has an *.hex extension).
3.2 Automatic Updates
When you update the analyzer software, the software may become
incompatible with the BusEngine and Firmware. After the analyzer is
powered on, the analyzer will display an error message telling you that it
needs to update the Firmware and/or BusEngine. When you click OK, the
update process takes place automatically.
To update the BusEngine and/or Firmware, follow these steps:
Step 1 If needed, update the analyzer software, following the steps outlined
in "Software Updates."
Step 2 Turn on the analyzer.
Because the BusEngine and/or the Firmware are incompatible with
the current analyzer software version, an error message appears
showing your current versions and indicating what versions you
need to install.
16
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Step 3 Click Yes.
The update process begins.
When the update has finished, a message such as the following
appears and tells you that the update is complete. The example
below follows a BusEngine update.
Step 4 Click OK.
Manual Updates
If you prefer, you can manually update the Firmware, and/or BusEngine
through the 'Analyzer Setup' dialog. To do this follow these steps:
Step 1 Select from the menu: Setup > Update BE/FW ....
The Update Analyzer dialog box opens.
Step 2 Select the one of the entity that you want to update from the list.
Step 3 If needed, browse to the application directory to locate the Update
files.
Step 4 Click the Update button.
At this time, the application would start the update process. A
progress bar in the dialog would show the progress of the update
process.
Please note that in some cases this process can take several minutes
to complete.
Step 5 When a the application notifies that the update process is done, you
may need to cycle the analyzer's power to cause the program to take
effect, or you may need to unplug and then reconnect the USB cable
17
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
between the analyzer and the computer to cause the new firmware
upgrade to take effect.
3.3 Software, Firmware, and BusEngine Versions
The Readme.html file on the installation CD and on the installed directory
on your hard drive. This file gives last-minute updates about the current
release. Included with each release are the most recent downloadable
images of the Firmware and the BusEngine.
Once the Merlin II has completed the self diagnostics and is connected to
the PC, you can check the latest version of the software and BusEngine.
To check information about the current software, select
About Merlin II … from the Help menu.
The About Merlin II window appears.
About Merlin II details revisions of the following software and hardware:
Software Version and Build Number
Product Name
Firmware Version
BusEngine Version
Unit Serial Number
Note When contacting CATC for technical support, please have available
all the revisions reported in the About Merlin II window.
3.4 Software Updates
When a new software release is available, it is posted on the Support page
of the CATC website at
www.catc.com/support.html.
The software is also available on CD from CATC.
18
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Updating from CD-ROM
To update the software from CD-ROM, follow these steps:
Step 1 Load the CD-ROM into the CD-ROM drive
Step 2 An install screen opens.
Step 3 Click Install Software and follow the onscreen instructions.
Updating from the CATC Website
Step 1 Open a web browser and navigate to www.catc.com.
Step 2 Find the latest released software version on the CATC website under
Support at the link shown at the top of the page.
If you are running the latest version of the software, no further
action is needed.
If you are not running the latest version.
Step 3 Download the software from the CATC website.
Step 4 If downloading from the web, unzip the files into your choice of
directory.
Step 5 Click Start, then Run, and browse to where you unzipped the files.
Step 6 Select the program named Setup and click Open.
Step 7 Click OK to run the Setup and begin the installation.
Step 8 Follow the on-screen instructions to complete the installation.
Step 9 Read the Readme file for important information on changes in the
release.
3.5 License Information
Licensing information for Merlin II can be viewed by selecting Display
Information from the Help menu. The License window provides
maintenance expiration and features data for Merlin II.
Updating the Software License
A License key is necessary to enable software maintenance.
A license is granted with the purchase of an analyzer. Thereafter, you must
renew your license if you wish to continue receiving support. You obtain a
new License Key from CATC. Once the License Key is obtained, follow
these steps to install it:
19
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Step 1 From the Help menu, select Update License. The Update License
dialog displays.
Step 2 Enter the path and filename for the License key or use the Browse
button to navigate to the directory that contains the License Key.
Step 3 Select the *.lic file, and then click Update Device.
20
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
21
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
4. Software Overview
4.1 The Main Display Windows
While some of the analyzer’s Main Display window options are familiar,
many contain options specific to the analyzer program.
Table 1: Main Display Pull-Down Windows
Menu Function
File
OpenOpens a file
Close Closes the current file
Save AsSaves all or a specified range of packets from the current file with a
specified name
Re-apply Encryption
Settings ...
If a trace has been recorded with the wrong encryption settings, you
can enter the correct ones via the Device List, then run File>
Re-apply Encryption Settings ... This command will open a Save As
dialog box for creating a new trace file using the new settings.
PrintPrints part or all of the current traffic data file
Print Preview Produces an on-screen preview before printing
Print SetupSets up your current or new printer
Edit CommentCreates or edits the Trace file comment field
Export » Packets to
Text (Packet View
Format)
Saves all or part of a trace to a text file
Export » Packets to
CSV Text
Saves all or part of a trace to a Comma Separated Values (CSV) file
suitable for viewing in a spreadsheet application
Export>>Audio
Streams
Saves audio data into a file. Presents options for setting the Audio
Source format, Output File format, Stream Direction, and Output
Sampling
Last File Lists the last files that were opened
Exit Exits the Merlin II program
Setup
Display Options Provides the control of various display options such as color, formats,
and filters.
Recording Options Opens a dialog box with checkboxes and drop-down menus for
setting up a recording.
Recording Wizard Starts a sequence of interactive dialog boxes that configures Merlin II
for a recording. This utility provides an alternative to the Recording
Options dialog box.
Update BE/FW Allows the operator to update the BusEngine and Firmware.
22
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Connectors ... Opens a dialog box for the output connector on the back of the
analyzer. There are two options:
Default Configuration - Causes the analyzer to output a low voltage
output signal for use by another device such as an oscilloscope. See
“External Input Signals” on page 84 for further explanation.
Output Radio Data - Causes the analyzer to output radio signals
through External Output connectors. If you place your mouse pointer
over the Output Radio Data option, a tool tip will provide a detailed
explanation of this option’s function.
Record
Start Causes the Analyzer to begin recording Bluetooth activity.
Stop Causes the Analyzer to stop recording.
Recording Mode Presents a drop-down menu with options for setting the analyzer's
recording mode:
Piconet Recording Mode -- Causes Merlin II to monitor and record
piconet traffic. Merlin II records the traffic data as specified in the
Recording Options, then uploads the data as a Trace file when the
recording is complete.
Inquiry Recording Mode -- Causes Merlin II to perform an inquiry to
detect and record Bluetooth devices within range. After completing
the recording, Merlin II uploads the trace to the PC and saves it as a
Trace file.
BT Neighborhood
Inquiry
Displays Bluetooth Address & clock frequency for devices in range.
The expected Bluetooth clock frequency is 3200 Hz +/- 250 ppm.
Report
File Information Details such information about the recording as number of packets
and triggering setup.
Error Summary Displays an error summary of the current trace file & allows you to go
to a specific packet, and save the error file to a uniquely named file.
Timing Calculation Starts the calculator dialog for calculating various timing and
bandwidth parameters in the recording file.
Traffic Summary Details the number and type of packets were transferred during the
recording, as well as message-level statistics.
Search
Go to trigger Positions the display to show the first packet that follows the trigger
event.
Go to
Packet/Message/
Protocol ...
Positions the display to the indicated packet, LMP/L2CAP message,
or Protocol Message (RFCOMM, TCS, or SDP protocols).
Go to Marker » Positions the display to a previously marked packet.
Go to » Enables quick searching for specific events using a cascade of pop-up
windows.
Find Allows complex searches.
Find Next Repeats the previous Find operation. Can also use F3 to find next.
Search Direction Allows you to specify a forward or backward search of a trace file.
Menu Function
23
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
View
Toolbars Presents a sub-menu with options for displaying/hiding the toolbars
and an option called Customize which allows the menus and toolbars
to be customized or reset to factory default.
Status Bar Switches display of the Status Bar on or off.
Unhide Cells > Presents a menu of currently hidden cells. Allows you to unhides any
cells that were hidden through the Display Options dialog box (View
> Display Options > Color/Format/Hiding)
Zoom InIncreases the size of the displayed elements.
Zoom Out Decreases the size of the displayed elements.
Wrap Allows the display to wrap.
Device List Displays a list of discovered Bluetooth devices and allows you to add
and delete devices and security settings by selecting the device,
pressing the security button, and modifying the settings.
Real-time Statistics Opens a dialog box with a graphical summary of the traffic currently
being recorded by the Analyzer. Real-time monitoring allows
continuous monitoring and displaying of traffic and related statistical
dada in a piconet. This processed data is displayed in a set of
configurable graphs.
Decoding
Assignments
Lists current L2CAP decoding assignments.
L2CAP Connections Lists current L2CAP connections.
RFCOMM Channel
Assignments
Lists current RFCOMM assignments.
Levels Presents a menu of display levels. This menu replicates the
Decode/Display buttons in the toolbar such as Packets, L2CAP, TCS
etc.)
Profiles Presents a menu of profiles. Selecting a profile will cause the
analyzer to decode the protocols appropriate for the selected profile.
Window
New Window Switches display of the Tool Bar on or off.
Cascade Displays all open windows in an overlapping arrangement.
Tile Arranges multiple trace windows as a series of strips across the main
display area or as a series of side-by-side tiles.
Arrange Icons Arranges minimized windows at the bottom of the display.
Windows Displays a list of open windows.
Menu Function
24
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
4.2 Toolbar
There are five toolbars in the Merlin II user interface toolbar. The Toolbar
buttons provide access to frequently-used program functions. Tool tips
describe icon functionality as the mouse arrow is moved over an item.
You display or hide toolbars by selecting View > Toolbars from the menu.
The sub-menu lists four toolbar names: Standard, Frequently Used,
Analysis, View Level, and Profiles.
Standard Toolbar
Help
Online Help Displays Help topic associated with current Merlin II window.
Help Topics... Displays online help.
Update License... Opens a dialog box for entering license key information for the
analyzer.
Display License
Information...
Displays current license information for the analyzer.
About Merlin II... Displays version information about Merlin II.
Open file
Save As
Print Preview
Print…
Setup Record Options - presents options for setting up a recording.
Setup Display Options - presents options for formatting the display.
Start Recording - starts a recording. The down arrow
gives you options for starting different types of
recordings: recording piconet, inquiry recording,
BTTrainer recording, or IUT:HCI recording.
Stop Recording
25
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Manually trigger the analyzer. Causes the analyzer to stop recording
after the post-trigger buffer is filled.
Bluetooth Neighborhood. Performs an inquiry and then lists the local
devices that it discovered
26
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
"Frequently Used" Toolbar
Zoom In
Zoom Out
Wrap
Show/Hide Channel 1 Traffic
Show/Hide Channel 2 Traffic
Show/Hide Duplicated Traffic
Show/Hide Frequency Hops
Show/Hide Nulls & Polls
Show/Hide ID Packets
Show/Hide Voice (SCO) Packets
Show/Hide devices that were specified in the Display Options dialog
box
Show/Hide Unassociated Traffic
Show/Hide HCI Traffic
Complex Find
Find Next
27
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Analysis Toolbar
View Level Toolbar
Display device list
File Information Report
Error Summary
Timing Calculations
Traffic Summary
Display Bus Utilization graph
Display Real-Time Statistics
View Packet Level (Baseband)
View HCI Traffic
View/Hide LMP Message Level
View/Hide L2CAP Message Level
View/Hide SDP Message Protocol Level
View/Hide SDP Transaction Protocol Level
View/Hide TCS Protocol Level
View/Hide RFCOMM Protocol Level
28
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
View Profiles Toolbar
Profile buttons decode the protocols associated with a particular profile.
When you press a profile button, the Merlin II software will automatically
select for you the protocol buttons associated with that profile such as
RFCOMM and OBEX.
View/Hide OBEX Protocol Level
View/Hide OBEX Protocol Transaction Communications Level
View AT Commands Protocol Level
View/Hide HDLC Protocol
View/Hide PPP
View/Hide HCRP
View/Hide AVCTP
View/Hide AVDTP
View/Hide BNEP Protocol
View HID Protocol Layer
View IP Protocol Layer
View TCP Protocol Layer
View UDP Protocol Layer
29
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Note: This toolbar is hidden on initial activation of the application. To
display this toolbar, select View > Toolbars > Profiles from the menu.
Decodes protocols for the GAP profile.
Decodes protocols for the SDAP profile.
Decodes protocols for the CIP profile.
Decodes protocols for the GAVDP profile.
Decodes protocols for the CTP profile.
Decodes protocols for the INT profile.
Decodes protocols for the SPP profile.
Decodes protocols for the HP profile.
Decodes protocols for the DUP profile.
Decodes protocols for the FAX profile.
Decodes protocols for the LAN profile.
Decodes protocols for the SIM profile.
Decodes protocols for the OBEX profile.
Decodes protocols for the OPP profile.
Decodes protocols for the FTP profile.
Decodes protocols for the SYNC profile.
Decodes protocols for the BIP profile.
30
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
4.3 Status Bar
The Status Bar is located at the bottom of the main display window.
Depending on the current activity, the bar can be divided into as many as
four segments. The figure below demonstrates the various displays in the
status bar.
Recording Progress
When you begin recording, the left-most segment of the Status Bar displays
a Recording Progress Indicator. The following figure displays the various
indications of the status bar:
Status Bar Position Definitions:
The following numbered definitions correspond to the number labels on the
above status bars.
1Analyzer is connecting to the host machine.
2Analyzer was disconnected from the host machine.
3Analyzer is connected to the host machine.
4Analyzer is connected to the host machine and is an idle mode.
Decodes protocols for the A2DP profile.
Decodes protocols for the BIP profile.
Decodes protocols for the BIP profile.
31
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
5Analyzer is synchronized to a piconet with master device that has BD_Address
008037322FD9.
6Analyzer is performing an inquiry (BT Neighborhood).
7Analyzer is in the process of synchronizing to a piconet with master device that
has BD_Address 008037322FD9.
8Analyzer is recording the traffic of the piconet with master device that has
BD_Address 008037322FD9. No trigger condition received yet.
9Analyzer is recording the traffic of the piconet with master device that has
BD_Address 008037322FD9. The trigger condition was received.
10 Analyzer has finished uploading the recorded traffic.
As recording progresses, the Progress Indicator changes to reflect the
recording progress graphically:
In the Progress Indicator, a black vertical line illustrates the location of the
Trigger Position you selected in Recording Options.
Pre-Trigger progress is displayed in the field to the left of the Trigger
Position in the before-Trigger color specified in the Display Options.
When the Trigger Position is reached, the progress indicator wiggles as it
waits for the trigger.
After the trigger occurs, the field to the right of the Trigger Position fills
in the post-Trigger color specified in the Display Options.
When recording is complete, the upper half of the progress indicator fills
in white, indicating the progress of the data upload to the host computer.
You should be aware of two exceptional conditions:
If a Trigger Event occurs during the before-Trigger recording, the
before-Trigger color changes to the after-Trigger color to indicate that not all
the expected data was recorded pre-Trigger.
When you click Stop before or after a Trigger Event, the Progress Bar adjusts
accordingly to begin uploading the most recently recorded data.
The Progress Bar fills with color in proportion to the specified size and
actual rate at which the hardware is writing and reading the recording
memory. However, the Progress Indicator is normalized to fill the space
within the Status Bar.
Recording Status
During recording activity, the current Recording Status is temporarily
displayed in the next segment. When you activate the Record function, this
segment flashes one of the following messages (depending on the selected
Recording Options):
Trigger?
Triggered!
32
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Recording & Spooling
Uploading
After recording stops,
The flashing message changes to Uploading data–x% done (x%
indicates the percentage completion of the data uploading process).
The traffic data is copied to disk (overwriting any previous version of this
file) using the default file name data.tfb or a new name specified in the
Recording options.
To abort the upload process,
Press Esc on your keyboard
OR
Again click in the Tool Bar.
You are prompted to choose whether to keep the partially uploaded data or to
throw it away.
When the data is saved, the Recorded Data file appears in the main display
window and the Recording Status window is cleared.
If the recording resulted from a Trigger Event, the first packet following the
Trigger (or the packet that caused the Trigger) is initially positioned second
from the top of the display.
If the recording did not result from a Trigger Event, the display begins with the
first packet in the traffic file.
Analyzer Status
The third segment in the status bar displays analyzer status. The status will
display one of the following:
No Sync - the system is not synced to any piconet
Inquiring... - The system is performing an Bluetooth Inquiry
Inquiring (infinite) ...- The timeout is set to 0.
Sync [XXX]... - The system is attempting to synchronize to a piconet where
the device with BD_Address XXX is the master.
Sync [XXX] - The system is synchronized to a piconet where the device
with BD_Address XXX is the master.
Rec [XXX] - System is recording the Bluetooth traffic of the piconet where
the device with BD_Address XXX is the master.
33
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
After the analyzer has synchronized to the Bluetooth piconet under
observation, an RSSI measurement of the master’s transmission will appear
in the status bar along side of the Master’s address and the Sync/Rec status.
The signal strength readings will display as a value in the range of -85 dBm
to -17 dBm.
Search Status
The rightmost segment displays the current search direction: Fwd (forward)
or Bwd (backward).
4.4 Zooming In and Out
The Zoom In and Zoom Out buttons allow the trace to be displayed in a
larger or smaller format.
Zoom In
Zoom In increases the size of the displayed elements, allowing fewer (but
larger) packet fields per screen.
Click on the Tool Bar.
Zoom Out
Zoom Out decreases the size of the displayed elements, allowing more (but
smaller) packet fields per screen.
Click on the Tool Bar.
4.5 Tool Tips
Throughout the application, tool tips provide useful information.
To display a tool tip, position the mouse pointer over an item. The tool tip
displays in a short moment if present. Tool tips can also be found over the
Tool Bar and in areas of the packet view screen.
4.6 Merlin II Analyzer Keyboard Shortcuts
Several frequently-used operations are bound to keyboard shortcuts.
Table 2: Keyboard Shortcuts
Key Combination Operation Key Combination Operation
Ctrl+O Open file Ctrl+P Print...
Ctrl+Home Jump to First packet Ctrl+End Jump to Last packet
Ctrl+F Search Forward Ctrl+B Search Backward
F3 Find Next Ctrl+L Search for Loss of Sync
34
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Shift+I Goto ID packet Shift+R Goto Freq Hop packet
Shift+P Goto Poll packet Shift+N Goto Null packet
Shift+M Goto DM1 packet Shift+F Goto FHS packet
Shift+1 Goto HV1 packet Shift+H Goto DH1 packet
Shift+3 Goto HV3 packet Shift+2 Goto HV2 packet
Shift+A Goto AUX1 packet Shift+V Goto DV packet
Shift+5 Goto DH3 packet Shift+4 Goto DM3 packet
Shift+7 Goto DH3 packet Shift+6 Goto DM5 packet
Shift+S Search for Soft Error Shift+E Search Error
Key Combination Operation Key Combination Operation
35
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
5. Recording Wizard
Recording Wizard is an interactive utility that presents a series of
user-friendly dialog boxes for setting up a recording session. Recording
Wizard serves as an alternative method of configuring the Recording
Options dialog box. When you are finished using the Wizard, you can view
your settings in the Recording Options window. By providing data to the
prompts in the Wizard’s dialog boxes, you configure Merlin II for a
recording session.
Starting Recording Wizard
To start the Recording Wizard,
Click on the Tool Bar or select Recording Wizard under Setup on the
Menu Bar.
You see the Recording Options window:
The Recording Options window has three buttons marked Next, Back, and
Cancel that allow you to move forward or backward through the wizard or
to cancel the wizard.
To begin advancing through the wizard,
Click Next to see the options for the three types of recordings that the
Recording Wizard can make.
36
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The Wizard advances to the next screen which presents three options:
I want to establish a new piconet and have Merlin II record traffic on that
piconet.
This option causes Merlin II to perform an Inquiry so it can discover
local devices and then establish a new piconet and record the piconet
traffic.
I want Merlin II to record traffic on a piconet that has already been
established.
This option lets Merlin II record traffic from an already established
piconet.
I am using Bluetooth Test Mode and want Merlin II to record traffic on
my test piconet.
This option lets Merlin II create either a single frequency range recording
of a range that you specify or create a recording of a limited hop
frequency range consisting of 5 frequency hops.
5.1 Recording a Traffic on a New Piconet
The New Piconet option shown in the previous screen presents users with
the means of recording the traffic from a new piconet. This option will
cause a sequence of screens to prompt you for information such as the
piconet Master address.
37
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The following steps shows you how to configure Merlin II to record a new
piconet.
Step 1 From the screen shown in the previous screenshot, select the
first option: I want to establish a new piconet and have
Merlin II record traffic on that piconet, then press Next.
The following screen displays.
Step 2 Select Perform Inquiry Now, then press Next.
Selecting Perform Inquiry Now will cause Merlin II to perform a
General Inquiry and collect addresses and other details about local
Bluetooth devices. If you already have address information for your
Bluetooth devices you can choose Skip Inquiry. Choosing Skip
Inquiry will cause the Recording Wizard to advance to Step 6. If you
are not sure what option to select, choose Perform Inquiry Now.
38
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The following screen will display.
You will see two options:
I want to search for all Bluetooth devices within range
This option will cause Merlin II to search for all Bluetooth devices that
are in range and ready to transmit and receive data (i.e., in Inquiry Scan
Mode)
I want to search only for devices corresponding to the following
(hexadecimal) DIAC:
This option will cause Merlin II to search for the class of devices that you
specify in the DIAC text box. DIAC stands for Device Inquiry Access
Code. Values are entered in hexadecimal format. You can get DIAC
values from the Bluetooth Specification.
Step 3 Select the first option: I want to search for all Bluetooth devices
39
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
within range, then press Next. The following screen will display.
You will see two options:
Step 4 In the text box, enter the length of time you want Merlin II to search
for nearby devices.
The default value is 11. If you do not sure what time value to enter, use
the default value.
Step 5 Press Next.
Before the Inquiry, Merlin II tests the hardware connection. In the case
of failure, the following screen will display.
Clicking OK will close the message box.
40
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
If Merlin II passes the hardware test, it will search for devices. The
Recording Wizard will display a progress bar and a message telling you
that a search is under way:
If no device is found, the Recording Wizard will display the following
screen:
41
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
If devices found, the Recording Wizard will display the following
screen:
Step 6 Press Next.
The following window will display:
Step 7 Select from the drop-down menu the hexadecimal address for your
Master device. If you do not see your device’s address, you may
type it into the text box yourself.
42
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The following window will display:
Step 8 Select from the drop-down menu the hexadecimal address for your
slave device into the box labeled Piconet Slave Address. If you do
not see your slave’s address, you can type it into the box.
Step 9 Press Next.
The following screen will display.
This screen displays the settings you selected.
43
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The Advanced button on the right will open the Recording Options
dialog box shown below. This screen will show the settings you selected
through the Recording Wizard have been applied to the Recording
Options dialog.
Step 10 Press Next to advance the Recording Wizard to the next screen.
The following screen displays:
Merlin II pages the Master and if specified in Step 8, the Slave devices.
44
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
If Merlin II is unable to complete its pages, the following screen will
display:
If Merlin II is able to complete its pages, it will enter into a synchronizing
state and then wait for you to create the piconet. During this waiting
period, Merlin II will display the following screen:
45
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Once you have created the piconet, Merlin II will synchronize to the
piconet and begin recording. During the recording, Merlin II will display
the following screen:
At the completion of the recording, Merlin II will display the following
screen:
You can repeat the recording by pressing the Repeat button.
Step 11 To close the wizard, press the Close button.
46
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The wizard will close and your trace will display.
5.2 Recording an Existing Piconet
Using Recording Wizard to record an existing piconet is similar to recording
a new piconet. The main difference is that you will be asked if your Master
device can support multiple slave devices and whether it can respond to
pages once it has created a piconet with another device.
Step 1 To start the Recording Wizard, press or select Setup >
Recording Wizard from the menu.
47
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The Recording Wizard introductory page will open:
Step 2 Press Next to advance to the next screen.
You will see three choices:
Step 3 Select the second option: I want Merlin II to record traffic
on a piconet that has already been established.
Step 4 Press Next.
48
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
You will see two choices:
Step 5 Select Perform Inquiry Now.
You will see two choices:
Step 6 Select the first option: I want Merlin II to search for all
Bluetooth devices within range.
49
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
If you want to limit the inquiry to a class of devices, select the second
option and enter the hexadecimal value for the device class in the text
box.
Step 7 Press Next.
The following screen will appear:
Step 8 If you want to change the search duration, type in a new
value into the text box. Otherwise, use the default value (20
seconds), then press Next.
50
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
If Merlin II cannot detect other devices, the following message will
display:
If Merlin II passes the hardware test, it will then goes onto conduct a
General Inquiry to locate local Bluetooth devices.
51
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
If Merlin II finds Bluetooth devices, it will display the following
message:
Check the Device List to see if Merlin II found all of the devices in your
piconet. If you feel that the list is incomplete, you can close this window
and press the button marked Repeat. This will cause Merlin II to repeat
the General Inquiry and recollect information on local Bluetooth devices.
Step 9 Press Next to advance to the next screen.
The following screen will prompt you for the Master device’s address.
The address can be selected from the menu or typed into the box:
52
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Step 10 Select or type in the Master device’s address into the box
next to the label Piconet Master Address.
Step 11 Press Next.
The following screen will display. This screen asks you which of the
following two options apply to your Master device. For some devices,
both options will apply.
You can select either or both options. They are not mutually exclusive:
If the Master supports inquiries while in a connected state, select the first
option. This will set Merlin II to use the 'Sync & Record' mode in its
attempts to synchronize to the Master. This will also cause the wizard to
skip to step 8.
If the Master can support piconets with multiple slaves, select the second
option. If you select this box alone (i.e., you leave the first box
unchecked), Merlin II will use the 'Passive Sync & Record' mode to
synchronize to the Master. The wizard will then advance to Screen 8*.
If the first checkbox was selected, Merlin II will use 'Sync & Record' no
matter what was set in the second box.
Step 12 If you want to skip the Master verification, put a check in the
box. If you are in doubt, leave the box unchecked.
53
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
If you selected only the second option in Step 12 (=’Passive Sync &
Record’), the following screen will display.
This screen asks you for the address of the Page Target device -- which
in this case is Merlin II. Since the devices in your piconet are not able to
respond to inquiries, Merlin II will not be able to page the devices and
join the piconet. Instead, you will assign Merlin II an address here in
this screen, then direct your piconet Master device to connect to Merlin
II. The Master will attempt to connect to Merlin II and therein give
Merlin II the information it needs to record the Master and slave devices.
Step 13 Type in an address of your choosing for Merlin II (= Page Target).
You are making up an address for Merlin II that the Master will use to try
to connect to Merlin II.
54
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Step 14 Press Next
Merlin II will then display your current settings.
The Advanced button will open the Recording Options dialog box
shown on page 43 and described in detail in Chapter 7.
Step 15 Press Next to begin the recording.
If the Merlin II hardware is not ready or connected or is in the process of
booting up, the following information message box will display:
Step 16 If the above information box opened, press OK to close it.
55
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The following dialog box will display:
Step 17 Press Retry or Back to re-attempt the process.
If the hardware failure described above do not occur, Merlin II will
conduct an inquiry. The screen will show that Merlin II is going to
attempt a recording in either ’Passive Sync & Record’ mode as shown
below or in ’Sync & Record’ mode depending on the options you
selected in Step 15.
56
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Step 18 If you are recording in ’Passive Sync & Record’ mode, you will
need to direct your Master device to attempt a connection to Merlin
II. This will provide Merlin II with the information it needs to
record the piconet.
Once Merlin II has the information it needs, it will begin recording. The
following screen will display:
The recording will end following a trigger event or when you press Stop
Recording button on the screen shown above or when you press the
button on the toolbar.
Step 19 When finished, press Close to close the Recording Wizard.
5.3 Recording in Test Mode
A Test Mode recording allows you to limit the frequency hopping range that
Merlin II will record. Two Test Modes are available: Reduced Hopping
Mode and Single Frequency Mode. Reduced Hopping Mode limits Merlin
II’s recording to the five frequency hops that are described in the Bluetooth
Specification. Single Frequency Mode limits Merlin II’s recording to a
single frequency range that you specify in the Recording Wizard.
Recording in Reduced Hopping Mode
To record in Reduced Hopping Mode, perform the following steps:
Step 1 Start the Recording Wizard by either pressing the button
or selecting Setup > Recording Wizard from the menu.
The Recording Wizard greeting screen will open.
57
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Step 2 Press Next to advance to the Recording Type screen.
The following screen will display:
Step 3 Select the third option: I am using Bluetooth Test Mode
and want Merlin II to record traffic on my test piconet.
Step 4 Press Next.
The following screen will display:
58
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Step 5 Select the option Reduced-hopping mode, then press Next.
The following screen will display:
Step 6 Select the address for your piconet’s Master device from the
drop-down menu. If you prefer, you can type in the address
into the box.
Step 7 Press Next.
The following screen will display. This screen will show the current
settings for the recording:
59
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
The Advanced button will open the Recording Options dialog box. See
Chapter 7 for details on the Recording Options dialog box.
Step 8 Press Next to begin the recording.
The following screen will display:
Step 9 When the recording finishes, the following screen will display.
You can repeat the recording by pressing the Repeat button.
Step 10 To close the wizard, press Finish.
60
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
5.4 Recording in Single Frequency Mode
Step 1 In the Recording Type window, select the third radio button
and click Next.
Step 2 In the Frequency Hopping Mode, window select the
Fixed-Frequency Mode radio button, enter the appropriate
values in the text boxes, and click Next.
Step 3 In the Master Device address box, enter the BD Address for
61
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
your Master Device.
Step 4 Press Next.
Step 5 Press Next. Merlin II then synchronizes with the Master
62
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
device and begins recording.
63
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
6. Recording Options
While the Recording Wizard provides a "walk through" process for setting
the recording options, you can get a more detailed view and set more
parameters through the "Recording Options" dialog box. The Recording
Options dialog box presents all of the settings needed to make a recording.
Once you have selected your recording options, you then select the
recording mode by clicking the down-arrow on the Record button and
selecting from the two mode options: Piconet and Inquiry. Merlin II will
then use the relevant Recording Options for the selected mode. For
example, if you select Piconet recording mode, Merlin II will use the
options from the Piconet page in the Recording Options dialog box.
6.1 Recording Modes
Pressing the down-arrow on the Record button displays a menu with two
Recording Modes:
Selecting one of these modes tells the analyzer what sets of Recording
Options it should use when you begin a recording.
Note: Selecting a Recording Mode from the menu does not cause the
analyzer to begin recording. To begin recording, you must press the
Recording button itself.
Piconet recording
Selecting Piconet, configures Merlin II to record piconet traffic using the
parameters set in the Piconet page in the Recording Options dialog box.
When you begin recording in this mode, Merlin II will to try to synchronize
to a piconet that matches the Piconet parameters set in the Recording
Options. The recorded traffic is captured off-the-air.
Inquiry recording
This mode configures Merlin II to record Inquiry traffic. When setting the
Merlin II to Inquiry recording, the system is ready to perform a Bluetooth
'General' or 'Dedicated' inquiry, according to the parameters specified in the
'inquiry' page of the Recording Options. The recorded traffic would consist
the transmitted packets as well as the responses received from Bluetooth
devices in the area.
64
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
UT:HCI mode
Configures the system to exclusively record HCI traffic from IUTs. This
recording mode bypasses the analyzer: HCI traffic from the IUT is recorded
directly by the analyzer software without going through the analyzer. This
means that you can record HCI traffic even if the analyzer is not turned on.
To record HCI traffic, first enable the recording of HCI traffic from IUTs.
You do this in the HCI page of the Recording Options dialog. Then set the
recording mode to something other than IUT:HCI. If you want to prevent
the recording of HCI traffic from IUTs, disable it in the HCI page of the
Recording Options dialog.
6.2 Opening the Recording Options Dialog Box
To open the Recording Options menu, click on the Tool Bar or select
Recording Options under Setup on the Menu Bar.
You see the Recording Options window. By default, the Piconet options
page displays:
65
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
You will need to set options for each of the Recording Options pages.
Generally, it is best to begin with the General and Piconet pages where you
can set the type of recording, and then move on to the Events and Actions
pages where you can set triggering events.
6.3 Recording Options - General
The General page controls the length of a recording and how it begins and
ends. It is shown in the previous illustration. The General page display four
boxes marked Recording Type, Buffer Size, Trigger Position, and Options.
Recording type
The Recording Type box presents options that control how
Merlin II begins and ends a recording. The options are:
Snapshot, Manual Trigger, and Event Trigger.
Snapshot
A Snapshot is a fixed-length recording whose size is determined by the
"Buffer Size" box in the Recording Options dialog or by a manual click of
the Stop button. Recording begins by clicking on the
Tool Bar and ends when either the selected buffer size is filled or you press
the Stop button.
Manual Trigger
A Manual Trigger recording is a one that is manually begun and ended.
Recording is begun by pressing on the Tool Bar.
Recording continues in a circular manner within the limits set by the buffer
size. Recording ends when is clicked on the Tool Bar or the Trigger
button is pressed on the analyzer's front panel. If you press the Trigger
button, recording will continue until the post-trigger memory has been
filled.
Event Trigger
An Event Trigger recording is one that uses an event trigger to end the
recording. Before recording begins, you define the event trigger in the
Trigger Options dialog box. You begin the recording by clicking
on the Tool Bar. Recording continues in a circular
manner within the limits set by the buffer size. Once the trigger event
occurs, some post-trigger recording occurs, then the recording ends.
Note In this mode, the recording can be stopped manually in the same way as for
"manual trigger" mode.
Options
The Options box contains two options:
66
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Beep When Trigger Occurs
Will cause the PC to beep when a trigger event
has occurred.
Save External Interface Signals
Will enable Merlin II to record input signals from a breakout board as fields
in a trace.
Buffer Size
The Buffer Size box has a slide bar for adjusting the
recording buffer size from 0.4 megabytes to 512
megabytes.
The Recording Type option determines how this buffer is used. Although
there are 512 megabytes of physical memory in the analyzer, the efficiency
of the recording ranges from 2:1 to 4:1 ratios of physical memory to actual
Bluetooth traffic. Shorter Bluetooth packets yield a less efficient recording.
The non-traffic portion of physical memory is utilized for control and timing
information.
Note The scale is not linear and affords more granularity in the smaller buffer sizes.
Trigger Position
The Trigger Position slide bar sets the amount of
post-trigger recording that Merlin II will perform. It
also allows adjustment of the location of the trigger
within the defined buffer. You can adjust the
Triggering Position between 1 and 99% post-Trigger.
Trigger Position is available only when Manual Trigger or Event
Trigger is selected as Recording type.
As an example, if the buffer size is set to 16MB, then for the following
Trigger Position settings, the amount of pre- and post-Trigger data is
95% post-triggering: 0.8MB pre-trigger, 15.2MB post-trigger
75% post-triggering: 4MB pre-trigger, 12MB post-trigger
50% post-triggering: 8MB pre-trigger, 8MB post-trigger
25% post-triggering: 12MB pre-trigger, 4MB post-trigger
5% post-triggering: 15.2MB pre-trigger, 0.8MB post-trigger
Note When a Trigger occurs, recording continues until the post-Trigger amount of the
buffer is filled.
67
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Debug
Enable CATC debug file
Checking this box enables the creation of a file that can be used by CATC
Support to aid in debugging. This option should always be disabled unless
you are requested to enable it by CATC personnel.
6.4 Recording Options - Piconet
The Recording Options dialog box has two pages for configuring how
Bluetooth traffic is recorded: Piconet, which configures piconet recording
sessions, and Inquiry which configures inquiry recording sessions.
For recording in Piconet mode, the Piconet page lets you specify the type of
piconet you will be recording and how Merlin II should synchronize and
record the piconet.
Frequency Hopping
Stay with Basic Hopping - Configures the probe to use the Basic Hopping
sequence as defined by the Bluetooth 1.1 specification.
Follow AFH - Configures the probe to use the Adaptive Frequency Hopping
sequence as defined by the Bluetooth 1.2 specification.
68
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Set... - Opens a dialog box for selecting the channels you would like Merlin
II to use.
LT_ADDr to Follow: Select devices to be followed.
Start with Predefined Channel Map: Tells Merlin II whether
to use the selected channel map from the table. Select an AFH
sequence from the list, check Start with Predefined Channel
Map, then click OK.
Add ...: Opens a dialog box for selecting multiple channels. You
can shift-click or control-click to select or deselect multiple
channels. Add a name to the box marked Name and then click OK
to close the dialog box and keep your selection.
Edit ...: Opens the dialog box shown above and lets you change the
current settings.
Delete: Deletes the selected AFH sequence.
69
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Sequence
The Hop Sequence menu presents the following three options:
79 Hops Standard - This is the option used for
most recordings.
Reduced Hop - Restricts Merlin II to five hop
frequencies defined in the test mode
specification of the Bluetooth Specification. When Reduced Hop
or Single Frequency is selected, the Sync method is set to Test
Mode and cannot be modified by the user.
Fixed Frequency - Allows the transmit and receive frequency
ranges to be specified. Selecting this option highlights the "DUT
Xmit" and "DUT Recv" text boxes. When Reduced Hop or
Single Frequency is selected, the Sync method is set to Test Mode
and cannot be modified by the user.
Enter values into the two text boxes to the set the transmit and
receive frequency ranges:
DUT Xmit Freq, MHz (+2402) – Allows the setting of the
transmit signal for the Device Under Test
DUT Recv Freq, MHz (+2404) – Allows the setting of the
receive signal for the Device Under Test
Synchronization Method
To record Bluetooth traffic, Merlin II needs to
synchronize to the piconet under observation.
Merlin II does not participate in the piconet
and behaves as a passive listener. It needs,
however, to communicate briefly with the devices in the piconet to learn the
Master clock and frequency hopping sequence.
Synchronization Method options let you configure how Merlin II
synchronizes to the piconet under observation. There are three options:
Sync and Record
Passive Sync & Record
Page Sync & Record
Note If the selected Hop Sequence is "Reduced Hop" or "Single Frequency," the Sync
Method is set to "Test Mode" and cannot be modified by the user.
70
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
To the right of the Sync Method menu are two menus which let you select
or enter address for the devices in the piconet:
Master Address - Presents a drop-down list of Master devices found
previously. You can also enter address values in this box.
Page Target -- Presents a drop-down list of Page Target devices found
previously. You can also enter address values in this box.
Between the two text boxes is the following button:
- Swaps the Master and Page Target addresses.
When to Use the Different Piconet Recording Modes
Page Sync & Record is the preferred option and should be used whenever
possible. If Page Sync & Record can not be used, then Sync & Record
should be used. Passive Sync and Record should be used only if the first
two options can not be used.
Sync & Record
Sync and Record works just like "Page Sync and Record" except that Merlin
II takes its sync data directly from the Master instead of the Slave devices.
With Sync and Record, Merlin II conducts a General Inquiry to get hop
frequency and clock information from the Master. Merlin II then waits to
detect piconet traffic from the Master device’s piconet. When the piconet is
established, Merlin II is able to synchronize to the Master and begin
recording. In contrast to "Page Sync and Record", "Sync and Record" can
be run with or without an established piconet.
Note This mode can only be used to find master devices that support Inquiry Scan.
To perform a "Sync and Record", follow the steps below:
Step 1 Turn on the Bluetooth devices under observation, and set up the
master device so it is ready to respond to Inquiry scan. For a typical
recording, ensure that the Master and Slave device(s) are not yet
connected.
Step 2 In the Modes tab under Recording Options, enter the Master
Device’s address.
Step 3 Start Merlin II recording by pressing the
Record button on the toolbar.
Step 4 When the analyzer is able to Sync up to the Piconet Master Clock,
the Green Sync LED in the Merlin II front panel will start
blinking.
71
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Step 5 Establish connection between the Bluetooth devices under analysis.
Step 6 When Merlin II senses Piconet traffic, the Green Sync light goes ON
solid, recording starts and the status bar in the bottom of the analyzer
screen shows activity.
Recording may be stopped manually or when the recording buffer is filled.
Note After the Sync light starts blinking, a connection between the Bluetooth
devices should be established within one (1) minute.
Passive Sync & Record
Passive Sync and Record is used in situations where the Master device and
slave devices do not support Inquiry Scan mode. When selected, Merlin II
enters Inquiry Scan and Page Scan mode and waits for a page from the
Master device. When the piconet Master pages Merlin II, Merlin II obtains
the information necessary for synchronization and then attempts to
synchronize to the piconet controlled by that Master.
"Passive Sync and Record" is designed to be used with established piconets
or private device networks.
Running "Passive Sync and Record" with Established Piconets
For most situations, "Passive Sync and Record" will be run after a piconet
has been established. The steps are as follows:
Step 1 Establish a connection between two or more Bluetooth devices.
Step 2 Under General Recording Options, select "Passive Sync & Record."
Step 3 Under the Modes tab in Recording Options, enter the address for the
piconet’s master device.
Step 4 Make up an address for Merlin II and enter it into the Page Target
address in the Modes tab in Recording Options. Make sure you do
not select an address for any other local device.
Step 5 Press the record button on the toolbar in Merlin
II to start a recording session.
Step 6 If necessary, have Master "discover" Merlin II through a General
Inquiry.
Step 7 From the Master device, initiate a page to Merlin II address. This
action will enable Merlin II to synchronize to the piconet. However,
the analyzer will not complete the page sequence from the Master.
This will cause the Master to time out in this request.
Step 8 At the end of this sequence, the green Sync light will go on solid,
72
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
recording will begin and activity will be displayed on the status bar
in the bottom of the analyzer screen.
Running "Passive Sync and Record" with Private Device Piconets
Because private device networks do not allow other devices to join the
network, Merlin II needs to temporarily assume the identity of a slave in the
network in order to join that network. To do this requires disabling the slave
and beginning the operation without an established piconet. The following
steps show the process.
Step 1 Turn the Master device on and the slave device off. You need the
slave device turned off so that Merlin II can take its place in the
piconet.
Step 2 Enter the slave’s address into Merlin II’s "Page Target" field in the
Modes tab in the Recording Options dialog box.
Step 3 Run "Passive Sync and Record." The Master will then page the
slave’s address and Merlin II will be able to sync.
Step 4 When Merlin II synchronizes to the Master, turn the slave back on.
When the Master re-pages the address the slave is admitted into the
private network. Since Merlin II is passive in this mode, the slave
and Merlin II do not conflict over the shared address. Merlin II is
then able to record the traffic between the Master and slave.
Page Sync & Record
"Page Sync and Record" is the recommended method of recording. "Page
Sync and Record" should be implemented before a piconet is established.
This mode causes Merlin II to perform a General Inquiry and collect sync
information from the specified slave device when it responds. Merlin II
then waits for the Master to begin paging the Slave devices. When paging
begins, Merlin II synchronizes to the Master and begins recording.
Note In order for this mode to work, the intended Slave must support "inquiry scan".
The following steps describe the simplest way to use this mode:
Step 1 Place both the "intended master" as well as its first "intended slave"
into inquiry scan mode.
Step 2 Have Merlin II perform a General Inquiry. You do this by pressing
the BT Neighborhood button
Step 3 After the General Inquiry completes, the addresses will populate the
menus marked Master Device and Page Target. Select or enter the
73
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
addresses for both your Master Device and Page Target.
Step 4 Click OK at the bottom of the window to close the Recording
Options dialog box.
Step 5 Press the button found on Merlin II’s
toolbar. After approximately 20 seconds, the "SYNC" light
on the front of Merlin II will begin to flash, meaning that
Merlin II has acquired all the information it needs to fully
synchronize with the piconet about to be established. At this
point, you should establish the piconet using the devices
previously defined as master and slave.
Note Inquiry Timeout is configurable (0 to 80 seconds) in the Recording Options
General page.
Step 6 When the piconet is established, the "Sync" light on the front of
Merlin II will change from flashing to solid, indicating that Merlin
II is fully synchronized to the piconet and is currently recording all
traffic within that piconet.
Note If the "sync" light on the front of Merlin II does not change from
flashing to solid it means that Merlin II did not synchronize with the
piconet when it was established.
Loss of Sync Timeout (1-30 secs)
This value specifies the amount of time that Merlin II will wait for piconet
traffic before determining that synchronization has been lost.
Force Re-synchronization
"Force Re-Synchronization" forces Merlin II to re-synchronize at the
beginning of each "Sync & Record," "Passive Sync & Record," or "Sync &
Record" operation. By default, "Force Re-Synchronization" is disabled
(i.e., unchecked).
Unchecking the "Force Re-Synchronization" checkbox tells Merlin II to use
its existing data on Bluetooth devices, thereby bypassing the
synchronization process and saving a few seconds from the beginning of the
trace. If you know that Merlin II’s data is correct, you can uncheck this
checkbox and cause Merlin II to try to use the existing data. If the data is
incomplete or incorrect, however, Merlin II will automatically perform a
refresh.
To examine Merlin II’s Bluetooth data, open the Device List (View >
Device List).
74
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Show Paging Traffic
Show Paging Traffic causes Merlin II to capture paging traffic between the
Master and Page Target devices. This option is used only with Page Sync
and Record Mode.
Follow Anonymity
Allows Merlin II to follow devices that are using anonymity mode.
Anonymity mode is an addressing mode in which devices are assigned
Bluetooth addresses based on a pseudo-random value. Anonymity mode is
defined in the Bluetooth 1.2 specification.
Advanced ...
The Advanced button opens a dialog box with additional
piconet settings:
Follow Master/Slave Switch
If enabled, this option allows Merlin II to follow a role switch between a
Master and Slave. This capability allows Merlin II to keep track of changes
in a device’s role when it changes from one role to another.
Merlin II is able to follow a role change by listening to the Slave device’s
Bluetooth clock and hop frequency as soon as it becomes a Master.
75
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Match Clock Rate
Match Clock Rate is a useful option if the Master device’s clock is
inaccurate. Match Clock Rate causes Merlin II to do a General Inquiry to
determine the Page Target's clock rate prior to synchronizing to the piconet.
If unchecked, Merlin II will begin piconet synchronization without first
doing a General Inquiry.
This option only works with Page Sync and Record mode.
Timeout (0-80 secs)
Default value for Inquiry Timeout is 20 seconds.
Correlation Value (33-64)
This value tells Merlin II how many bits in the sync word of each received
packet must be matched in order for Merlin II to consider the packet valid
and start recording.
This value specifies how long Merlin II should perform the Inquiry process
for the General (unlimited) and Dedicated (limited) recording modes. After
the specified time has elapsed, Merlin II will illuminate the trigger light on
the front of the analyzer.
Initial De-whitening State
De-Whiten On -- Turns on De-Whitening
De-Whiten Off -- Turns off De-Whitening
This setting controls the initial de-whitening state.
If " De-Whitening Off" is selected, Merlin II will try to synchronize without
de-whitening the received packets, and assume that they were transmitted
un-whitened.
If " De-Whitening On" is selected, Merlin II will use received packets to try
to synchronize while it is performing a de-whitening process that complies
with Bluetooth specifications.
This setting controls the initial state for the synchronization. After Merlin
II has synchronized to the piconet, it will try to follow changes in the
whitening scheme and dynamically track whitened and non-whitened
traffic.
In case a recording was stopped and you want to restart a recording session
of the same piconet, you should remember that Merlin II might still be
synchronized to the same piconet. As Merlin II dynamically follows
whitening scheme changes, it will not use the initial de-whitening state.
However, if you want to force an initial de-whitening state, check the "Force
Re-Synchronization" flag.
76
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Sync Window
The Sync Window slide bar controls the amount of time that Merlin II
should wait between receiving an Inquiry Response (which will cause the
Sync LED to blink) and detecting Master-Slave piconet traffic (which will
cause the Sync LED to turn solid.)
A "Narrow" setting means that the wait time will be minimal, a "Wide"
setting means it will be "maximal." The default is "Narrow" and this is
suitable for most recordings. However, if significant drift occurs between
Merlin II’s clock and that of the Master, Merlin II may not be able to sync
properly to the piconet. Under these conditions, you should move the slide
bar towards the "Wide" Setting. The slide bar has five discrete settings.
After sync is established, Merlin II will remain in sync as long as there is
piconet traffic.
6.5 Recording Options - Inquiry
The Inquiry page configures how Merlin II records Inquiry traffic. Two
main options are presented in the Sync Method drop-down menu: General
(Unlimited) Inquiry and Dedicated (Limited) Inquiry. These options tell
Merlin II what kind of Inquiry traffic it should expect to record.
This page includes settings only for Inquiry recording and BT
Neighborhood.
General (Unlimited)
"General" means "General Inquiry" and is used to search for ALL Bluetooth
devices that are within range, for the amount of time specified in the Inquiry
Timeout field. Completion of the inquiry process is indicated by
illumination of the "trigger" light on the front of the analyzer. All
responding packets will be displayed when data upload from the analyzer
completes.
Dedicated (Limited)
"Dedicated" means a specific class or group of Bluetooth devices
(designated by the DIAC field of the Recording Options dialog). Selecting
"Dedicated" causes Merlin II to search for all devices from a specific class
or group that are within range, for the amount of time specified in the
Inquiry Timeout field. Completion of the inquiry process is indicated by
illumination of the "trigger" light on the front of the analyzer. All
responding packets will be displayed when stop is selected.
77
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Timeout (0-80 secs)
Default value for Inquiry Timeout is 20 seconds.
Correlation Value (33-64)
This value tells Merlin II how many bits in the sync word of each received
packet must be matched in order for Merlin II to consider the packet valid
and start recording.
This value specifies how long Merlin II should perform the Inquiry process
for the General (unlimited) and Dedicated (limited) recording modes. After
the specified time has elapsed, Merlin II will illuminate the trigger light on
the front of the analyzer.
BT Neighborhood
These options configure how the BT Neighborhood command behaves. BT
Neighborhood is a utility that performs an Inquiry and then lists the local
devices that it discovered.
Use Default settings -- Sets the analyzer to record a General
Inquiry with an Inquiry Timeout of 11 seconds.
Match 'Inquiry' Recording Settings -- Sets the analyzer to use
the settings you chose above under Hop Sequence, Inquiry Type,
and Additional Settings.
6.6 Recording Options - Events
If you have selected Event Trigger mode under the General tab in the
Recording Options screen, you may now select specific Bluetooth events
using the Events tab on the Recording Option Screen. You can also use the
Actions tab to define specific event sequences that will trigger Merlin II to
record a Bluetooth session.
In addition, the Events and Actions screens allow you to specify which
packets you want to include or exclude from the recording.
78
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Click the Events tab on the Recording Options screen.
You see the Event Groups window:
The Event triggering and filtering options allow you to set event conditions
for errors and/or a variety of packet characteristics.
Clicking a check box causes further options to display in the right side of the
window.
Additional Timeslot Filtering
By default, Merlin II records frequency hop and timestamp information for
all time slots in the Piconet under analysis, regardless of whether the time
slot contained a Bluetooth packet. This means that in instances where there
is little piconet traffic, Merlin II will display row after row of empty packets
-- each representing an empty time slot. Through the use of timeslot
filtering, these empty packets can be filtered out. Filtering out this
information has the benefit of freeing memory so that more traffic can be
recorded.
79
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Filter Empty Slots
If "Filter Empty Slots" is checked, Merlin II will exclude all empty time
slots from a recording except for those that lie immediately in front of
Bluetooth communications packets. These remaining empty packets are
preserved to give timestamp and frequency hop reference data to the packets
that follow.
Filter Slots on Packet Filter
If filters are used to exclude FHS, DM1 or other packets, Merlin II will
exclude these packets from a trace and mark their locations with empty
packets. The result can be rows and rows of empty packets. The option
"Filter Empty Slots" will not exclude these empty slots because they lie
immediately in front of Bluetooth communications packets - even though
those packets were not recorded. To eliminate these empty packets, select
"Filter Slots on Packet Filter."
Packet Headers
Clicking "Packet Headers" opens three sets of check boxes and menus on
the right that represent fields within packet headers: Packet Type, Active
Member Address, Flow Control, Acknowledgment, and Sequence Number.
Select Packet Headers under Event Groups.
You see the Packet Headers window:
80
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Packet Type
The Packet Type drop down menu lets you select the following packet types
for filtering or triggering: NULL, POLL, FHS, DM1, DH1, HV1, HV2,
HV3/EV3, DV, AUX1/PS, DM3, DH3, EV4, EV5, DM5, or DH5.
Select “Don’t Care” if you want Merlin II to ignore this field.
LT_ADDR
(Logical Transport Address) The LT_ADDR is a three bit slave address. To
select packets from a particular slave device for filtering or triggering, enter
an address into the LT_ADDR text box. You can target up to three devices
using the three text boxes.
SEQN, ARQN, and Flow Control Bits
To set event conditions on SEQN, ARQN, and Flow control, uncheck
"Don't Care." Unchecking "Don't Care" sets the event condition to
SEQN=0 AND ARQN=0 AND Flow=0. This action also puts a checkmark
in the box marked "Packet Headers." A checkmark next to SEQN, ARQN,
or Flow changes the value of this field from zero to one. For example, if
SEQN is checked, the event condition becomes "SEQN=1 AND ARQN=0
AND Flow=0.
To cause Merlin II to ignore this set of check boxes, choose "don't care."
Payload Headers
Clicking "Payload Headers" causes a series of options to display on the right
for setting conditions on payload headers. You will see two sets of options
- one for single slot packets such as DM1 packets and a second for multi-slot
packets such as DM3 packets. Within each set is a menu for the Logical
Channel and sub-options for Flow Control, and Payload length. These latter
two options allow you to modify searches based on the Logical Channel.
An example would be "Trigger on a start L2CAP message whose flow
control bit is 1 and whose data field length is less than 20."
81
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Select Payload Headers under Event Groups.
You see the Payload Headers window
L_CH (Logical Channel)
The "L_CH" drop down menu presents five options for
setting conditions on the Logical Channel:
Don’t care
00 Undefined
01 L2CAP continue
10 L2CAP start
11 LMP message
Select "Don’t care" if you do not want to set conditions on Logical Channel.
Flow
Three "radio buttons" are presented for
setting conditions based on Flow control:
•0
•1
Don’t care
82
Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.30
Flow works in conjunction with the Logical Channel (L_CH) menu - you
select an option from the L_CH menu and then select an option under Flow.
Select "Don’t care" if you do not want to set conditions on Flow control.
Length (in bytes)
Using both the drop down menu and the text box, you
can set conditions based on data field length. The
maximum length for a single slot packet is 29 bytes. The
maximum length for multi-slot packets is 339 bytes.
The drop-down menu gives you options for selecting
operators such as "greater than" and "equal to." The text box to the right of
the drop-down menu lets you enter values.
The Length option works in conjunction with the Logical Channel (L_CH)
menu - you first select an option from the L_CH menu and then select an
option under Length.
Data Patterns
Clicking "Data Patterns" causes a text box to
appear for entering patterns to be matched in the
raw payload data. Patterns of up to eight
hexidecimal bytes can be entered.
Errors
Clicking "Errors" causes check boxes to appear for setting conditions for
triggering or filtering based on packet/signaling/protocol errors. You can
select one or a combination of errors.
• Select Errors under Event Groups.

Navigation menu