francozappa / bias Goto Github PK

View Code? Open in Web Editor NEW

89.0 89.0 22.0 116 KB

Bluetooth Impersonation AttackS (BIAS) [CVE 2020-10135]

Home Page: https://francozappa.github.io/about-bias/

License: MIT License

Makefile 0.11% Python 51.34% C 48.55%

authentication bias bluetooth security wireless

bias's People

Contributors

Stargazers

Watchers

bias's Issues

IF Data for Samsung S3 after parsing pairing exchange

Hi,

I did a pairing and captured H4/LMP data for my test mobile.

{
    "if": "Samsung s3.json",
    "lmin": "07",
    "lmax": "07",
    "btadd": "aa:bb:cc:dd:ee:ff",
    "btname": "BIASing",
    "lmpver": "6", (
    "companyid": "29",
    "subversion": "2003",
    "lmpfp0": "fffe8ffed83f5b87",
    "lmpfp1": "0f00000000000000",
    "lmpfp2": "4503000000000000",
    "iocaps": "01",
    "authreq": "03",
    "oobdata": "0",
    "deviceclass": "5a020c"
}

Found all of them except:

lmin,lmax

lmpfp0
lmpfp1
lmpfp2

Can you advise how to find lmin,lmax and lmpfp0,lmpfp1,lmpfp2??? Best with JSON key names in Wireshark.

Thanks,

Error when run bias.py

Hi,

Thank you so much for your support.

I think I'm on the last step of this poc and many thanks for your helping.
I'm going to try to do the pentest for a xiaomi speaker(a simple one).

Firstly I edit the IF file as shown below:

all these info are from wireshark when I pair my device to my laptop, so I think there should not be some issues here.
Then I run enable_diag.py, which is no error now because I rebuild the kernel.(But there is also no success response on terminal, I think it has been worked)
I run 'make generate' It generated successfully.
then I run internalblue, and start the wireshark, it works well.
Finally I run 'make bias'
It shows like below:

I think there are some errors happened.

Do you have any idea? I think this should be the last step for this testing.

Many thanks.

Board is not visible as the impersonated device

Hi,

I'm experimenting with BIAS using the CYW920819EVB-02 and experiencing some difficulties I cannot explain.

First off, the boards firmware got patched so a slight modification to the internalblue was needed (seemoo-lab/internalblue#44).

Instead of seeing the LMP packets, I see packets labeled as HCI_H4, with an description Sent Unknown HCI paket type 0x07, might this signalize that something does not work as intended to?

Finally, I'm able to patch the ROM of the dev-board, and also send the impersonation info. However, after the bias.py script finishes, there is no difference on how do the other devices see the board (name, MAC address). When I run the hciconfig hci1 name command, the name of the interface is correct, as in the impersonation file, but the MAC address is wrong. If I reload the hci device (hciconfig hci1 reset), new MAC shows up, but the name gets replaced by machine (host) name. If I check from a different machine I see the updated MA, but incorrect name as well.

Should the "impersonation results" be visible immediately after loading the info to board?

Do we need to change the contents of AF.json if we are using a different board?

I am trying to replicate the BIAS attack using a CYW920719B2Q40EVB-01 board, since the board used in the paper (CYW920819EVB-02 evaluation board) is discontinued and not available in the market anymore.

While executing the 'make bias' command to impersonate the target, I am getting the following error: "patchRom: 'PATCHRAM _TARGET _TABLE ADDRESS' not in fw.py. FEATURE NOT SUPPORTED!" As a result of this error, I am unable to achieve the "Ready to connect to a victim slave" state. Could it be because the attack file AF.json (https://github.com/francozappa/bias/blob/master/bias/AF.json) might not be compatible with the board that we are using? As far as I understood from the paper, the addresses specified in the AF.json file indicate the addresses of the functions that are patched by the bias.py code. Do we need to change the addresses if we are using a different board? If so, how we can derive these addresses? Any suggestions regarding this would be highly appreciated.

Error with enable_diag.py

Hello,

I'm trying to execute enable_diag.py on board CYW920819EVB-02 but I had this error

Traceback (most recent call last):
File "enable_diag.py", line 5, in
s.send(b"\x07\xf0\x01")
socket.error: [Errno 22] Invalid argument

Any idea of this error?

Thank you

Check if BIAS attack is successful and possibility for action after unauthenticated connection [Help Needed]

Hi @francozappa, @marcinguy

Sorry to bother. I am trying to carry out BIAS attack, however, not sure if I'm successful. Using the same board for impersonation but on the victim it appears impersonated device is connected for few seconds only before changing back to paired. May I know how do you tell if the victim is vulnerable?

And also after impersonation and connecting to Windows 10, is it possible to use the dev board to transfer data using Bluetooth profiles like OPP?

Thanks for the help.

"make bias" error

Hello,

I am currently testing BIAS based on https://github.com/francozappa/bias/tree/master/bias you provided.

There was no problem until the bias.py file creates.

In the next step ("make bias" to patch CYW920819 devboard firmware), i got the following error.

Could you please let me know what is the solution for this issue?

How to identify whether the vulneriability after scripts running

Hi,

Many thanks for your helping,
I have no issues on running the scripts(No errors shows on the terminal).
However, there are some issues when I check the wireshark log:

I pair the phone(Samsung galaxy 6+) and a vehicle Headunit(which is the device I really want to test, and it runs as a master I think). And also run the bias.py.
I disconect the Bluetooth between phone and headunit and switch off the bluetooth on the phone.
Then I use the headunit to connect (The traffic go to my laptop, that's correct because my laptop is the fake phone now).
However, the connection is failed.
And I did not see any role switch happen during the connection(I think it should have some traffic like my laptop send "become master" then the headunit accept it, but I only see the headunit send change role to become a master and ask my laptop a Link Key)

And the log on Interblue log:

Do you have any idea your PoC is success?

In addition, according to your paper:

2. Can I say If the communication use legacy mode and role switch is enable, the attack will success?(beause I also capture the logs between my android phone and headunit, in that logs, it shows that the role switch feature is enable and Secure Connection is false, so it use Legacy mode and enable role switch)

Many thanks

Some question about perform bias+knob

Hi,
I am a newbie in Bluetooth security. Shall I ask some questions about bias and knob?
I read your paper which is super fantastic! And in the paper, you mentioned the bias is used to bypass the authentication, the knob is used to let the session key(used for encryption) simple after authentication bypassed. Is my understanding correct?

Back to this toolkit, in readme file you describe this step:
"Change lmin and lmax to set the max and min entropy value for the session key (KNOB attack)"
I have three questions:

Does this mean that if I set up lmin and lmax well, this toolkit will also help me to do the knob attack with bias together automotically?
How can I set lmin and lmax? I saw in configuration file, you set these two values to '07', do I need to change that? Or how can I set that to make session key more simple?
As stated in your paper, the knock attack is to make the session key simple and then brute force decrypt. Does this toolkit contain a brute force and decryption part scripts?

Many thanks,

Brian

Obtaining IF data

Hi,

How did you obtain IF data i.e for Pixel2 https://github.com/francozappa/bias/blob/master/bias/IF_PIXEL2.json?

Any easy way to dump it from the device/retrieve it from the device?

Wondering how easy this is, to judge potential attack practicability.

I want to try possibly with Samsung mobile.

Thanks,

Can BIAS attack be conducted with Cypress CYW920719

I don't have a CYW920819, but I have a CYW920719. So I wonder if I can test BIAS attack on this board? Thanks.

error when running "make bias"

Hi,
I am currently testing BIAS based on https://github.com/francozappa/bias/tree/master/bias you provided. I'm trying to patch the borad CYW920819EVB-02 with the IF_PIXEL2.json you provided, but it dosen't work.

All the steps I've done as following:

Change the kernel of Ubuntu 18.04.2 TLS running in VMware workstaion Pro 16.1. Download the linux 4.14.111 kernel from http://cdn.kernel.org/pub/linux/kernel/v4.x/linux-4.14.111.tar.xz. Replace the source code you provided at https://github.com/francozappa/bias/tree/master/linux-4.14.111 then compile and install it.
Install Internalblue following the guide on https://github.com/seemoo-lab/internalblue/blob/master/doc/setup.md except for using the python2 release https://github.com/seemoo-lab/internalblue/releases/tag/python2 rather than the master branch. The commands all I used are as following:

sudo apt install git python-setuptools binutils-arm-linux-gnueabi adb python-pip python-dev gcc
pip install --upgrade https://github.com/seemoo-lab/internalblue/archive/python2.zip
sudo apt-get install wireshark-dev wireshark cmake
git clone https://github.com/seemoo-lab/h4bcm_wireshark_dissector
cd h4bcm_wireshark_dissector
mkdir build
cd build
cmake ..
make
make install

I test the Internalblue and it works well.

Connect the devboard to the laptop via USB. The laptop I use is Thinkpad X1 Carbon 5th.
Attach to the devboard. I have to mention that I use the command 'stty -F /dev/ttyUSB0 115200' and 'btattach -B /dev/ttyUSB0' rather than the origin command 'btattach -B /dev/ttyUSB1 -S 115200 &' to attach the board. It's because that the origin command dosen't work. I don't know whether it's correct.
Enable the devboard diagnostic mode with 'sudo python2 enable_diag.py'. I think it works because there is no error. Then I follow the steps in the README.md and everything goes well.
When I try to patch the devboard with 'make bias', error occurred as the Fig 1. I have no idea about what happened. I also try my own json, and there is an error as well.

Do you have any ideas?
Many thanks!

Frank.

Performing BIAS connection and file send from the Victim to the Attacker

I am performing BIAS following your instructions.

Sorry for MEGA big issue, but maybe Captures help to see the problem and help.

However, I cannot establish connection from Victim to the Attacker (Attacker is the board, the BT address changed to the mobile BT)

I see "Bluetooth HCI Command - Link Key Request Negative Reply", so I also don't see auth request.

Below is full capture:

      1 0.000000       2f:d0:a5:b4           controller            LMP      64     LMP_version_req

Frame 1: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      2 0.000018       controller            2f:d0:a5:b4           LMP      64     LMP_version_res

Frame 2: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      3 0.000021       2f:d0:a5:b4           controller            LMP      64     LMP_features_req

Frame 3: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      4 0.016037       controller            2f:d0:a5:b4           LMP      64     LMP_features_res

Frame 4: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      5 0.016054       2f:d0:a5:b4           controller            LMP      64     LMP_features_req_ext

Frame 5: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      6 0.016057       controller            2f:d0:a5:b4           LMP      64     LMP_features_res_ext

Frame 6: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      7 0.032049       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 7: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      8 0.032067       2f:d0:a5:b4           controller            LMP      64     LMP_host_connection_req

Frame 8: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      9 0.032069       controller            host                  HCI_EVT  13     Rcvd Connect Request

Frame 9: 13 bytes on wire (104 bits), 13 bytes captured (104 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Connect Request
    Event Code: Connect Request (0x04)
    Parameter Total Length: 10
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    Class of Device: 0x1c010c (Computer:Laptop - services: Rendering Capturing ObjectTransfer)
    Link Type: ACL connection (Data Channels) (0x01)

No.     Time           Source                Destination           Protocol Length Info
     10 0.032071       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 10: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     11 0.032187       host                  controller            HCI_CMD  11     Sent Accept Connection Request

Frame 11: 11 bytes on wire (88 bits), 11 bytes captured (88 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Accept Connection Request

No.     Time           Source                Destination           Protocol Length Info
     12 0.047997       controller            host                  HCI_EVT  7      Rcvd Command Status (Accept Connection Request)

Frame 12: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Accept Connection Request (0x0409)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0000 1001 = Opcode Command Field: Accept Connection Request (0x009)
    [Command in frame: 11]
    [Response in frame: 17]
    [Command-Pending Delta: 15,81ms]
    [Pending-Response Delta: 31,787ms]

No.     Time           Source                Destination           Protocol Length Info
     13 0.063998       controller            2f:d0:a5:b4           LMP      64     LMP_accepted

Frame 13: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     14 0.064014       controller            2f:d0:a5:b4           LMP      64     LMP_setup_complete

Frame 14: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     15 0.079764       2f:d0:a5:b4           controller            LMP      64     LMP_set_AFH

Frame 15: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     16 0.079782       2f:d0:a5:b4           controller            LMP      64     LMP_channel_classification_req

Frame 16: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     17 0.079784       controller            host                  HCI_EVT  14     Rcvd Connect Complete

Frame 17: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Connect Complete
    Event Code: Connect Complete (0x03)
    Parameter Total Length: 11
    Status: Success (0x00)
    Connection Handle: 0x000b
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    Link Type: ACL connection (Data Channels) (0x01)
    Encryption Mode: Encryption Disabled (0x00)
    [Command in frame: 11]
    [Pending in frame: 12]
    [Pending-Response Delta: 31,787ms]
    [Command-Response Delta: 47,597ms]

No.     Time           Source                Destination           Protocol Length Info
     18 0.079786       2f:d0:a5:b4           controller            LMP      64     LMP_setup_complete

Frame 18: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     19 0.080063       host                  controller            HCI_CMD  6      Sent Read Remote Supported Features

Frame 19: 6 bytes on wire (48 bits), 6 bytes captured (48 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Read Remote Supported Features

No.     Time           Source                Destination           Protocol Length Info
     20 0.095701       controller            2f:d0:a5:b4           LMP      64     LMP_channel_classification

Frame 20: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     21 0.095721       2f:d0:a5:b4           controller            LMP      64     LMP_timing_accuracy_req

Frame 21: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     22 0.095730       controller            2f:d0:a5:b4           LMP      64     LMP_max_slot

Frame 22: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     23 0.111682       2f:d0:a5:b4           controller            LMP      64     LMP_auto_rate

Frame 23: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     24 0.111696       controller            2f:d0:a5:b4           LMP      64     LMP_timing_accuracy_res

Frame 24: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     25 0.111699       2f:d0:a5:b4           controller            LMP      64     LMP_max_slot_req

Frame 25: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     26 0.127737       controller            2f:d0:a5:b4           LMP      64     LMP_max_slot_req

Frame 26: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     27 0.127749       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 27: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     28 0.127751       controller            2f:d0:a5:b4           LMP      64     LMP_accepted

Frame 28: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     29 0.127753       controller            host                  HCI_EVT  6      Rcvd Max Slots Change

Frame 29: 6 bytes on wire (48 bits), 6 bytes captured (48 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Max Slots Change
    Event Code: Max Slots Change (0x1b)
    Parameter Total Length: 3
    Connection Handle: 0x000b
    Maximum Number of Slots: 5

No.     Time           Source                Destination           Protocol Length Info
     30 0.143685       2f:d0:a5:b4           controller            LMP      64     LMP_accepted

Frame 30: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     31 0.143700       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 31: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     32 0.143702       controller            2f:d0:a5:b4           LMP      64     LMP_auto_rate

Frame 32: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     33 0.159984       controller            2f:d0:a5:b4           LMP      64     LMP_timing_accuracy_req

Frame 33: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     34 0.159998       2f:d0:a5:b4           controller            LMP      64     LMP_preferred_rate

Frame 34: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     35 0.175953       2f:d0:a5:b4           controller            LMP      64     LMP_timing_accuracy_res

Frame 35: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     36 0.175968       2f:d0:a5:b4           controller            LMP      64     LMP_features_req

Frame 36: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     37 0.175971       controller            2f:d0:a5:b4           LMP      64     LMP_features_res

Frame 37: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     38 0.191832       2f:d0:a5:b4           controller            LMP      64     LMP_features_req_ext

Frame 38: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     39 0.191847       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 39: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     40 0.191850       controller            2f:d0:a5:b4           LMP      64     LMP_features_res_ext

Frame 40: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     41 0.207993       2f:d0:a5:b4           controller            LMP      64     LMP_features_req_ext

Frame 41: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     42 0.208008       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 42: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     43 0.208011       controller            2f:d0:a5:b4           LMP      64     LMP_features_res_ext

Frame 43: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     44 0.223947       2f:d0:a5:b4           controller            LMP      64     LMP_name_req

Frame 44: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     45 0.223961       controller            2f:d0:a5:b4           LMP      64     LMP_name_res

Frame 45: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     46 0.223964       controller            host                  HCI_EVT  7      Rcvd Command Status (Read Remote Supported Features)

Frame 46: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Read Remote Supported Features (0x041b)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0001 1011 = Opcode Command Field: Read Remote Supported Features (0x01b)
    [Command in frame: 19]
    [Response in frame: 47]
    [Command-Pending Delta: 143,901ms]
    [Pending-Response Delta: 0,002ms]

No.     Time           Source                Destination           Protocol Length Info
     47 0.223966       controller            host                  HCI_EVT  14     Rcvd Read Remote Supported Features

Frame 47: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Read Remote Supported Features
    Event Code: Read Remote Supported Features (0x0b)
    Parameter Total Length: 11
    Status: Success (0x00)
    Connection Handle: 0x000b
    LMP Features
    [Command in frame: 19]
    [Pending in frame: 46]
    [Pending-Response Delta: 0,002ms]
    [Command-Response Delta: 143,903ms]

No.     Time           Source                Destination           Protocol Length Info
     48 0.223968       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 48: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     49 0.224059       host                  controller            HCI_CMD  7      Sent Read Remote Extended Features

Frame 49: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Read Remote Extended Features

No.     Time           Source                Destination           Protocol Length Info
     50 0.240004       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 50: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     51 0.240015       controller            host                  HCI_EVT  9      Rcvd Link Key Request

Frame 51: 9 bytes on wire (72 bits), 9 bytes captured (72 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Link Key Request
    Event Code: Link Key Request (0x17)
    Parameter Total Length: 6
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)

No.     Time           Source                Destination           Protocol Length Info
     52 0.240021       2f:d0:a5:b4           controller            LMP      64     LMP_au_rand

Frame 52: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     53 0.240024       controller            host                  HCI_EVT  7      Rcvd Command Status (Read Remote Extended Features)

Frame 53: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Read Remote Extended Features (0x041c)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0001 1100 = Opcode Command Field: Read Remote Extended Features (0x01c)
    [Command in frame: 49]
    [Response in frame: 54]
    [Command-Pending Delta: 15,965ms]
    [Pending-Response Delta: 0,001ms]

No.     Time           Source                Destination           Protocol Length Info
     54 0.240025       controller            host                  HCI_EVT  16     Rcvd Read Remote Extended Features Complete

Frame 54: 16 bytes on wire (128 bits), 16 bytes captured (128 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Read Remote Extended Features Complete
    Event Code: Read Remote Extended Features Complete (0x23)
    Parameter Total Length: 13
    Status: Success (0x00)
    Connection Handle: 0x000b
    Page Number: 1
    Max. Page Number: 1
    LMP Features
    [Command in frame: 49]
    [Pending in frame: 53]
    [Pending-Response Delta: 0,001ms]
    [Command-Response Delta: 15,966ms]

No.     Time           Source                Destination           Protocol Length Info
     55 0.240147       host                  controller            HCI_CMD  10     Sent Link Key Request Negative Reply

Frame 55: 10 bytes on wire (80 bits), 10 bytes captured (80 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Link Key Request Negative Reply

No.     Time           Source                Destination           Protocol Length Info
     56 0.240159       localhost ()          LiteonTe_d0:a5:b4 ()  L2CAP    15     Sent Information Request (Extended Features Mask)

Frame 56: 15 bytes on wire (120 bits), 15 bytes captured (120 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 10
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 66]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: ]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     57 0.255999       controller            host                  HCI_EVT  13     Rcvd Command Complete (Link Key Request Negative Reply)

Frame 57: 13 bytes on wire (104 bits), 13 bytes captured (104 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Complete
    Event Code: Command Complete (0x0e)
    Parameter Total Length: 10
    Number of Allowed Command Packets: 1
    Command Opcode: Link Key Request Negative Reply (0x040c)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0000 1100 = Opcode Command Field: Link Key Request Negative Reply (0x00c)
    Status: Success (0x00)
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    [Command in frame: 55]
    [Command-Response Delta: 15,852ms]

No.     Time           Source                Destination           Protocol Length Info
     58 0.256013       controller            2f:d0:a5:b4           LMP      64     LMP_not_accepted

Frame 58: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     59 0.256103       host                  controller            HCI_CMD  14     Sent Remote Name Request

Frame 59: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Remote Name Request

No.     Time           Source                Destination           Protocol Length Info
     60 0.271955       controller            host                  HCI_EVT  7      Rcvd Command Status (Remote Name Request)

Frame 60: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Remote Name Request (0x0419)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0001 1001 = Opcode Command Field: Remote Name Request (0x019)
    [Command in frame: 59]
    [Response in frame: 62]
    [Command-Pending Delta: 15,852ms]
    [Pending-Response Delta: 47,965ms]

No.     Time           Source                Destination           Protocol Length Info
     61 0.303685       controller            2f:d0:a5:b4           LMP      64     LMP_name_req

Frame 61: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     62 0.319920       controller            host                  HCI_EVT  258    Rcvd Remote Name Request Complete

Frame 62: 258 bytes on wire (2064 bits), 258 bytes captured (2064 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Remote Name Request Complete
    Event Code: Remote Name Request Complete (0x07)
    Parameter Total Length: 255
    Status: Success (0x00)
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    Remote Name: laptop
    [Command in frame: 59]
    [Pending in frame: 60]
    [Pending-Response Delta: 47,965ms]
    [Command-Response Delta: 63,817ms]

No.     Time           Source                Destination           Protocol Length Info
     63 0.335804       2f:d0:a5:b4           controller            LMP      64     LMP_name_res

Frame 63: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     64 0.383600       2f:d0:a5:b4           controller            LMP      64     LMP_detach

Frame 64: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     65 0.463622       controller            host                  HCI_EVT  8      Rcvd Number of Completed Packets

Frame 65: 8 bytes on wire (64 bits), 8 bytes captured (64 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Number of Completed Packets
    Event Code: Number of Completed Packets (0x13)
    Parameter Total Length: 5
    Number of Connection Handles: 1
    Connection Handle: 0x000b
    Number of Completed Packets: 1

No.     Time           Source                Destination           Protocol Length Info
     66 0.463632       controller            host                  HCI_EVT  7      Rcvd Disconnect Complete

Frame 66: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Disconnect Complete
    Event Code: Disconnect Complete (0x05)
    Parameter Total Length: 4
    Status: Success (0x00)
    Connection Handle: 0x000b
    Reason: Remote User Terminated Connection (0x13)

No.     Time           Source                Destination           Protocol Length Info
     67 5.791261       2f:d0:a5:b4           controller            LMP      64     LMP_version_req

Frame 67: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     68 5.791274       controller            2f:d0:a5:b4           LMP      64     LMP_version_res

Frame 68: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     69 5.791277       2f:d0:a5:b4           controller            LMP      64     LMP_features_req

Frame 69: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     70 5.807008       controller            2f:d0:a5:b4           LMP      64     LMP_features_res

Frame 70: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     71 5.807021       2f:d0:a5:b4           controller            LMP      64     LMP_features_req_ext

Frame 71: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     72 5.807024       controller            2f:d0:a5:b4           LMP      64     LMP_features_res_ext

Frame 72: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     73 5.823270       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 73: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     74 5.823284       2f:d0:a5:b4           controller            LMP      64     LMP_host_connection_req

Frame 74: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     75 5.823286       controller            host                  HCI_EVT  13     Rcvd Connect Request

Frame 75: 13 bytes on wire (104 bits), 13 bytes captured (104 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Connect Request
    Event Code: Connect Request (0x04)
    Parameter Total Length: 10
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    Class of Device: 0x1c010c (Computer:Laptop - services: Rendering Capturing ObjectTransfer)
    Link Type: ACL connection (Data Channels) (0x01)

No.     Time           Source                Destination           Protocol Length Info
     76 5.823399       host                  controller            HCI_CMD  11     Sent Accept Connection Request

Frame 76: 11 bytes on wire (88 bits), 11 bytes captured (88 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Accept Connection Request

No.     Time           Source                Destination           Protocol Length Info
     77 5.839246       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 77: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     78 5.839256       controller            host                  HCI_EVT  7      Rcvd Command Status (Accept Connection Request)

Frame 78: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Accept Connection Request (0x0409)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0000 1001 = Opcode Command Field: Accept Connection Request (0x009)
    [Command in frame: 76]
    [Response in frame: 83]
    [Command-Pending Delta: 15,857ms]
    [Pending-Response Delta: 31,827ms]

No.     Time           Source                Destination           Protocol Length Info
     79 5.855274       controller            2f:d0:a5:b4           LMP      64     LMP_accepted

Frame 79: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     80 5.855282       controller            2f:d0:a5:b4           LMP      64     LMP_setup_complete

Frame 80: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     81 5.871049       2f:d0:a5:b4           controller            LMP      64     LMP_set_AFH

Frame 81: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     82 5.871076       2f:d0:a5:b4           controller            LMP      64     LMP_channel_classification_req

Frame 82: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     83 5.871083       controller            host                  HCI_EVT  14     Rcvd Connect Complete

Frame 83: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Connect Complete
    Event Code: Connect Complete (0x03)
    Parameter Total Length: 11
    Status: Success (0x00)
    Connection Handle: 0x000b
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    Link Type: ACL connection (Data Channels) (0x01)
    Encryption Mode: Encryption Disabled (0x00)
    [Command in frame: 76]
    [Pending in frame: 78]
    [Pending-Response Delta: 31,827ms]
    [Command-Response Delta: 47,684ms]

No.     Time           Source                Destination           Protocol Length Info
     84 5.871087       2f:d0:a5:b4           controller            LMP      64     LMP_setup_complete

Frame 84: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     85 5.871280       host                  controller            HCI_CMD  6      Sent Read Remote Supported Features

Frame 85: 6 bytes on wire (48 bits), 6 bytes captured (48 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Read Remote Supported Features

No.     Time           Source                Destination           Protocol Length Info
     86 5.887119       controller            2f:d0:a5:b4           LMP      64     LMP_channel_classification

Frame 86: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     87 5.887136       2f:d0:a5:b4           controller            LMP      64     LMP_timing_accuracy_req

Frame 87: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     88 5.887142       controller            2f:d0:a5:b4           LMP      64     LMP_max_slot

Frame 88: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     89 5.903047       2f:d0:a5:b4           controller            LMP      64     LMP_auto_rate

Frame 89: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     90 5.903064       controller            2f:d0:a5:b4           LMP      64     LMP_timing_accuracy_res

Frame 90: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     91 5.903077       2f:d0:a5:b4           controller            LMP      64     LMP_max_slot_req

Frame 91: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     92 5.919000       controller            2f:d0:a5:b4           LMP      64     LMP_max_slot_req

Frame 92: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     93 5.919014       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 93: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     94 5.919016       controller            2f:d0:a5:b4           LMP      64     LMP_accepted

Frame 94: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     95 5.934985       controller            host                  HCI_EVT  6      Rcvd Max Slots Change

Frame 95: 6 bytes on wire (48 bits), 6 bytes captured (48 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Max Slots Change
    Event Code: Max Slots Change (0x1b)
    Parameter Total Length: 3
    Connection Handle: 0x000b
    Maximum Number of Slots: 5

No.     Time           Source                Destination           Protocol Length Info
     96 5.935000       2f:d0:a5:b4           controller            LMP      64     LMP_accepted

Frame 96: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     97 5.935003       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 97: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     98 5.950981       controller            2f:d0:a5:b4           LMP      64     LMP_auto_rate

Frame 98: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     99 5.950995       controller            2f:d0:a5:b4           LMP      64     LMP_timing_accuracy_req

Frame 99: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    100 5.950998       2f:d0:a5:b4           controller            LMP      64     LMP_preferred_rate

Frame 100: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    101 5.967129       2f:d0:a5:b4           controller            LMP      64     LMP_timing_accuracy_res

Frame 101: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    102 5.967136       2f:d0:a5:b4           controller            LMP      64     LMP_features_req

Frame 102: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    103 5.967137       controller            2f:d0:a5:b4           LMP      64     LMP_features_res

Frame 103: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    104 5.983228       2f:d0:a5:b4           controller            LMP      64     LMP_features_req_ext

Frame 104: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    105 5.983237       2f:d0:a5:b4           controller            LMP      64     LMP_features_req_ext

Frame 105: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    106 5.983238       controller            2f:d0:a5:b4           LMP      64     LMP_features_res_ext

Frame 106: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    107 5.998945       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 107: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    108 5.998953       controller            2f:d0:a5:b4           LMP      64     LMP_features_res_ext

Frame 108: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    109 5.998957       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 109: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    110 6.014926       2f:d0:a5:b4           controller            LMP      64     LMP_name_req

Frame 110: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    111 6.014934       controller            2f:d0:a5:b4           LMP      64     LMP_name_res

Frame 111: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    112 6.014936       controller            host                  HCI_EVT  7      Rcvd Command Status (Read Remote Supported Features)

Frame 112: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Read Remote Supported Features (0x041b)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0001 1011 = Opcode Command Field: Read Remote Supported Features (0x01b)
    [Command in frame: 85]
    [Response in frame: 113]
    [Command-Pending Delta: 143,656ms]
    [Pending-Response Delta: 0ms]

No.     Time           Source                Destination           Protocol Length Info
    113 6.014936       controller            host                  HCI_EVT  14     Rcvd Read Remote Supported Features

Frame 113: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Read Remote Supported Features
    Event Code: Read Remote Supported Features (0x0b)
    Parameter Total Length: 11
    Status: Success (0x00)
    Connection Handle: 0x000b
    LMP Features
    [Command in frame: 85]
    [Pending in frame: 112]
    [Pending-Response Delta: 0ms]
    [Command-Response Delta: 143,656ms]

No.     Time           Source                Destination           Protocol Length Info
    114 6.014937       controller            host                  HCI_EVT  9      Rcvd Link Key Request

Frame 114: 9 bytes on wire (72 bits), 9 bytes captured (72 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Link Key Request
    Event Code: Link Key Request (0x17)
    Parameter Total Length: 6
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)

No.     Time           Source                Destination           Protocol Length Info
    115 6.014991       host                  controller            HCI_CMD  7      Sent Read Remote Extended Features

Frame 115: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Read Remote Extended Features

No.     Time           Source                Destination           Protocol Length Info
    116 6.031142       2f:d0:a5:b4           controller            LMP      64     LMP_au_rand

Frame 116: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    117 6.031148       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 117: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    118 6.031149       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 118: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    119 6.031150       controller            host                  HCI_EVT  7      Rcvd Command Status (Read Remote Extended Features)

Frame 119: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Read Remote Extended Features (0x041c)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0001 1100 = Opcode Command Field: Read Remote Extended Features (0x01c)
    [Command in frame: 115]
    [Response in frame: 120]
    [Command-Pending Delta: 16,159ms]
    [Pending-Response Delta: 0,001ms]

No.     Time           Source                Destination           Protocol Length Info
    120 6.031151       controller            host                  HCI_EVT  16     Rcvd Read Remote Extended Features Complete

Frame 120: 16 bytes on wire (128 bits), 16 bytes captured (128 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Read Remote Extended Features Complete
    Event Code: Read Remote Extended Features Complete (0x23)
    Parameter Total Length: 13
    Status: Success (0x00)
    Connection Handle: 0x000b
    Page Number: 1
    Max. Page Number: 1
    LMP Features
    [Command in frame: 115]
    [Pending in frame: 119]
    [Pending-Response Delta: 0,001ms]
    [Command-Response Delta: 16,16ms]

No.     Time           Source                Destination           Protocol Length Info
    121 6.031215       host                  controller            HCI_CMD  10     Sent Link Key Request Negative Reply

Frame 121: 10 bytes on wire (80 bits), 10 bytes captured (80 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Link Key Request Negative Reply

No.     Time           Source                Destination           Protocol Length Info
    122 6.031220       localhost ()          LiteonTe_d0:a5:b4 (laptop) L2CAP    15     Sent Information Request (Extended Features Mask)

Frame 122: 15 bytes on wire (120 bits), 15 bytes captured (120 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 10
    Data
    [Connect in frame: 83]
    [Disconnect in frame: 132]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: laptop]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 76]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 83]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
    123 6.046937       controller            host                  HCI_EVT  13     Rcvd Command Complete (Link Key Request Negative Reply)

Frame 123: 13 bytes on wire (104 bits), 13 bytes captured (104 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Complete
    Event Code: Command Complete (0x0e)
    Parameter Total Length: 10
    Number of Allowed Command Packets: 1
    Command Opcode: Link Key Request Negative Reply (0x040c)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0000 1100 = Opcode Command Field: Link Key Request Negative Reply (0x00c)
    Status: Success (0x00)
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    [Command in frame: 121]
    [Command-Response Delta: 15,722ms]

No.     Time           Source                Destination           Protocol Length Info
    124 6.046959       host                  controller            HCI_CMD  14     Sent Remote Name Request

Frame 124: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Remote Name Request

No.     Time           Source                Destination           Protocol Length Info
    125 6.063204       controller            host                  HCI_EVT  7      Rcvd Command Status (Remote Name Request)

Frame 125: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Remote Name Request (0x0419)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0001 1001 = Opcode Command Field: Remote Name Request (0x019)
    [Command in frame: 124]
    [Response in frame: 128]
    [Command-Pending Delta: 16,245ms]
    [Pending-Response Delta: 47,893ms]

No.     Time           Source                Destination           Protocol Length Info
    126 6.063210       controller            2f:d0:a5:b4           LMP      64     LMP_not_accepted

Frame 126: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    127 6.079201       controller            2f:d0:a5:b4           LMP      64     LMP_name_req

Frame 127: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    128 6.111097       controller            host                  HCI_EVT  258    Rcvd Remote Name Request Complete

Frame 128: 258 bytes on wire (2064 bits), 258 bytes captured (2064 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Remote Name Request Complete
    Event Code: Remote Name Request Complete (0x07)
    Parameter Total Length: 255
    Status: Success (0x00)
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    Remote Name: laptop
    [Command in frame: 124]
    [Pending in frame: 125]
    [Pending-Response Delta: 47,893ms]
    [Command-Response Delta: 64,138ms]

No.     Time           Source                Destination           Protocol Length Info
    129 6.111114       2f:d0:a5:b4           controller            LMP      64     LMP_name_res

Frame 129: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    130 6.207008       2f:d0:a5:b4           controller            LMP      64     LMP_detach

Frame 130: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
    131 6.238948       controller            host                  HCI_EVT  8      Rcvd Number of Completed Packets

Frame 131: 8 bytes on wire (64 bits), 8 bytes captured (64 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Number of Completed Packets
    Event Code: Number of Completed Packets (0x13)
    Parameter Total Length: 5
    Number of Connection Handles: 1
    Connection Handle: 0x000b
    Number of Completed Packets: 1

No.     Time           Source                Destination           Protocol Length Info
    132 6.270949       controller            host                  HCI_EVT  7      Rcvd Disconnect Complete

Frame 132: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Disconnect Complete
    Event Code: Disconnect Complete (0x05)
    Parameter Total Length: 4
    Status: Success (0x00)
    Connection Handle: 0x000b
    Reason: Remote User Terminated Connection (0x13)

Why it does not "connect" then?

Also while sending file from victim to attacker, it does not go through

Capture below:

      1 0.000000       2f:d0:a5:b4           controller            LMP      64     LMP_version_req

Frame 1: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      2 0.000011       controller            2f:d0:a5:b4           LMP      64     LMP_version_res

Frame 2: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      3 0.016271       2f:d0:a5:b4           controller            LMP      64     LMP_features_req

Frame 3: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      4 0.016278       controller            2f:d0:a5:b4           LMP      64     LMP_features_res

Frame 4: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      5 0.031989       2f:d0:a5:b4           controller            LMP      64     LMP_features_req_ext

Frame 5: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      6 0.032004       controller            2f:d0:a5:b4           LMP      64     LMP_features_res_ext

Frame 6: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      7 0.032008       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 7: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      8 0.048285       2f:d0:a5:b4           controller            LMP      64     LMP_host_connection_req

Frame 8: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
      9 0.048293       controller            host                  HCI_EVT  13     Rcvd Connect Request

Frame 9: 13 bytes on wire (104 bits), 13 bytes captured (104 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Connect Request
    Event Code: Connect Request (0x04)
    Parameter Total Length: 10
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    Class of Device: 0x1c010c (Computer:Laptop - services: Rendering Capturing ObjectTransfer)
    Link Type: ACL connection (Data Channels) (0x01)

No.     Time           Source                Destination           Protocol Length Info
     10 0.048300       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 10: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     11 0.048391       host                  controller            HCI_CMD  11     Sent Accept Connection Request

Frame 11: 11 bytes on wire (88 bits), 11 bytes captured (88 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Accept Connection Request

No.     Time           Source                Destination           Protocol Length Info
     12 0.064167       controller            host                  HCI_EVT  7      Rcvd Command Status (Accept Connection Request)

Frame 12: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Accept Connection Request (0x0409)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0000 1001 = Opcode Command Field: Accept Connection Request (0x009)
    [Command in frame: 11]
    [Response in frame: 17]
    [Command-Pending Delta: 15,776ms]
    [Pending-Response Delta: 16,016ms]

No.     Time           Source                Destination           Protocol Length Info
     13 0.064179       controller            2f:d0:a5:b4           LMP      64     LMP_accepted

Frame 13: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     14 0.080167       controller            2f:d0:a5:b4           LMP      64     LMP_setup_complete

Frame 14: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     15 0.080179       2f:d0:a5:b4           controller            LMP      64     LMP_set_AFH

Frame 15: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     16 0.080181       2f:d0:a5:b4           controller            LMP      64     LMP_channel_classification_req

Frame 16: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     17 0.080183       controller            host                  HCI_EVT  14     Rcvd Connect Complete

Frame 17: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Connect Complete
    Event Code: Connect Complete (0x03)
    Parameter Total Length: 11
    Status: Success (0x00)
    Connection Handle: 0x000b
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    Link Type: ACL connection (Data Channels) (0x01)
    Encryption Mode: Encryption Disabled (0x00)
    [Command in frame: 11]
    [Pending in frame: 12]
    [Pending-Response Delta: 16,016ms]
    [Command-Response Delta: 31,792ms]

No.     Time           Source                Destination           Protocol Length Info
     18 0.080484       host                  controller            HCI_CMD  6      Sent Read Remote Supported Features

Frame 18: 6 bytes on wire (48 bits), 6 bytes captured (48 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Read Remote Supported Features

No.     Time           Source                Destination           Protocol Length Info
     19 0.095959       2f:d0:a5:b4           controller            LMP      64     LMP_setup_complete

Frame 19: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     20 0.095971       controller            2f:d0:a5:b4           LMP      64     LMP_channel_classification

Frame 20: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     21 0.111960       2f:d0:a5:b4           controller            LMP      64     LMP_timing_accuracy_req

Frame 21: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     22 0.111972       controller            2f:d0:a5:b4           LMP      64     LMP_max_slot

Frame 22: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     23 0.111975       2f:d0:a5:b4           controller            LMP      64     LMP_auto_rate

Frame 23: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     24 0.128118       controller            2f:d0:a5:b4           LMP      64     LMP_timing_accuracy_res

Frame 24: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     25 0.128131       2f:d0:a5:b4           controller            LMP      64     LMP_max_slot_req

Frame 25: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     26 0.128133       controller            2f:d0:a5:b4           LMP      64     LMP_max_slot_req

Frame 26: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     27 0.144142       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 27: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     28 0.144158       controller            2f:d0:a5:b4           LMP      64     LMP_accepted

Frame 28: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     29 0.144160       controller            host                  HCI_EVT  6      Rcvd Max Slots Change

Frame 29: 6 bytes on wire (48 bits), 6 bytes captured (48 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Max Slots Change
    Event Code: Max Slots Change (0x1b)
    Parameter Total Length: 3
    Connection Handle: 0x000b
    Maximum Number of Slots: 5

No.     Time           Source                Destination           Protocol Length Info
     30 0.144163       2f:d0:a5:b4           controller            LMP      64     LMP_accepted

Frame 30: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     31 0.160146       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 31: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     32 0.160160       controller            2f:d0:a5:b4           LMP      64     LMP_auto_rate

Frame 32: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     33 0.160162       controller            2f:d0:a5:b4           LMP      64     LMP_timing_accuracy_req

Frame 33: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     34 0.176266       2f:d0:a5:b4           controller            LMP      64     LMP_preferred_rate

Frame 34: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     35 0.176282       2f:d0:a5:b4           controller            LMP      64     LMP_timing_accuracy_res

Frame 35: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     36 0.176284       2f:d0:a5:b4           controller            LMP      64     LMP_features_req

Frame 36: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     37 0.192244       controller            2f:d0:a5:b4           LMP      64     LMP_features_res

Frame 37: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     38 0.192303       2f:d0:a5:b4           controller            LMP      64     LMP_features_req_ext

Frame 38: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     39 0.192305       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 39: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     40 0.208257       controller            2f:d0:a5:b4           LMP      64     LMP_features_res_ext

Frame 40: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     41 0.208266       controller            host                  HCI_EVT  7      Rcvd Command Status (Read Remote Supported Features)

Frame 41: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Read Remote Supported Features (0x041b)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0001 1011 = Opcode Command Field: Read Remote Supported Features (0x01b)
    [Command in frame: 18]
    [Response in frame: 42]
    [Command-Pending Delta: 127,782ms]
    [Pending-Response Delta: 0,002ms]

No.     Time           Source                Destination           Protocol Length Info
     42 0.208268       controller            host                  HCI_EVT  14     Rcvd Read Remote Supported Features

Frame 42: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Read Remote Supported Features
    Event Code: Read Remote Supported Features (0x0b)
    Parameter Total Length: 11
    Status: Success (0x00)
    Connection Handle: 0x000b
    LMP Features
    [Command in frame: 18]
    [Pending in frame: 41]
    [Pending-Response Delta: 0,002ms]
    [Command-Response Delta: 127,784ms]

No.     Time           Source                Destination           Protocol Length Info
     43 0.208274       2f:d0:a5:b4           controller            LMP      64     LMP_features_req_ext

Frame 43: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     44 0.208357       host                  controller            HCI_CMD  7      Sent Read Remote Extended Features

Frame 44: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Read Remote Extended Features

No.     Time           Source                Destination           Protocol Length Info
     45 0.224075       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 45: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     46 0.224090       controller            2f:d0:a5:b4           LMP      64     LMP_features_res_ext

Frame 46: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     47 0.224092       LiteonTe_d0:a5:b4 ()  localhost ()          L2CAP    15     Rcvd Information Request (Extended Features Mask)

Frame 47: 15 bytes on wire (120 bits), 15 bytes captured (120 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 10
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Source Device Name: ]
    [Source Role: Master (1)]
    [Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Destination Device Name: ]
    [Destination Role: Slave (2)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     48 0.224095       2f:d0:a5:b4           controller            LMP      64     LMP_name_req

Frame 48: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     49 0.240274       controller            2f:d0:a5:b4           LMP      64     LMP_name_res

Frame 49: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     50 0.240288       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 50: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     51 0.240290       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 51: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     52 0.240292       controller            host                  HCI_EVT  7      Rcvd Command Status (Read Remote Extended Features)

Frame 52: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Read Remote Extended Features (0x041c)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0001 1100 = Opcode Command Field: Read Remote Extended Features (0x01c)
    [Command in frame: 44]
    [Response in frame: 53]
    [Command-Pending Delta: 31,935ms]
    [Pending-Response Delta: 15,88ms]

No.     Time           Source                Destination           Protocol Length Info
     53 0.256172       controller            host                  HCI_EVT  16     Rcvd Read Remote Extended Features Complete

Frame 53: 16 bytes on wire (128 bits), 16 bytes captured (128 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Read Remote Extended Features Complete
    Event Code: Read Remote Extended Features Complete (0x23)
    Parameter Total Length: 13
    Status: Success (0x00)
    Connection Handle: 0x000b
    Page Number: 1
    Max. Page Number: 1
    LMP Features
    [Command in frame: 44]
    [Pending in frame: 52]
    [Pending-Response Delta: 15,88ms]
    [Command-Response Delta: 47,815ms]

No.     Time           Source                Destination           Protocol Length Info
     54 0.256275       host                  controller            HCI_CMD  14     Sent Remote Name Request

Frame 54: 14 bytes on wire (112 bits), 14 bytes captured (112 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: HCI Command (0x01)
Bluetooth HCI Command - Remote Name Request

No.     Time           Source                Destination           Protocol Length Info
     55 0.256287       localhost ()          LiteonTe_d0:a5:b4 ()  L2CAP    15     Sent Information Request (Extended Features Mask)

Frame 55: 15 bytes on wire (120 bits), 15 bytes captured (120 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 10
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: ]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     56 0.256299       localhost ()          LiteonTe_d0:a5:b4 ()  L2CAP    21     Sent Information Response (Extended Features Mask, Success)

Frame 56: 21 bytes on wire (168 bits), 21 bytes captured (168 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 16
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: ]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     57 0.271981       controller            host                  HCI_EVT  7      Rcvd Command Status (Remote Name Request)

Frame 57: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Command Status
    Event Code: Command Status (0x0f)
    Parameter Total Length: 4
    Status: Pending (0x00)
    Number of Allowed Command Packets: 1
    Command Opcode: Remote Name Request (0x0419)
        0000 01.. .... .... = Opcode Group Field: Link Control Commands (0x01)
        .... ..00 0001 1001 = Opcode Command Field: Remote Name Request (0x019)
    [Command in frame: 54]
    [Response in frame: 59]
    [Command-Pending Delta: 15,706ms]
    [Pending-Response Delta: 48,278ms]

No.     Time           Source                Destination           Protocol Length Info
     58 0.288222       controller            2f:d0:a5:b4           LMP      64     LMP_name_req

Frame 58: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     59 0.320259       controller            host                  HCI_EVT  258    Rcvd Remote Name Request Complete

Frame 59: 258 bytes on wire (2064 bits), 258 bytes captured (2064 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Remote Name Request Complete
    Event Code: Remote Name Request Complete (0x07)
    Parameter Total Length: 255
    Status: Success (0x00)
    BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)
    Remote Name: laptop
    [Command in frame: 54]
    [Pending in frame: 57]
    [Pending-Response Delta: 48,278ms]
    [Command-Response Delta: 63,984ms]

No.     Time           Source                Destination           Protocol Length Info
     60 0.320275       2f:d0:a5:b4           controller            LMP      64     LMP_name_res

Frame 60: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     61 0.320277       LiteonTe_d0:a5:b4 (laptop) localhost ()          L2CAP    21     Rcvd Information Response (Extended Features Mask, Success)

Frame 61: 21 bytes on wire (168 bits), 21 bytes captured (168 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 16
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Source Device Name: laptop]
    [Source Role: Master (1)]
    [Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Destination Device Name: ]
    [Destination Role: Slave (2)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     62 0.320284       controller            host                  HCI_EVT  8      Rcvd Number of Completed Packets

Frame 62: 8 bytes on wire (64 bits), 8 bytes captured (64 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Number of Completed Packets
    Event Code: Number of Completed Packets (0x13)
    Parameter Total Length: 5
    Number of Connection Handles: 1
    Connection Handle: 0x000b
    Number of Completed Packets: 2

No.     Time           Source                Destination           Protocol Length Info
     63 0.320285       LiteonTe_d0:a5:b4 (laptop) localhost ()          L2CAP    15     Rcvd Information Request (Fixed Channels Supported)

Frame 63: 15 bytes on wire (120 bits), 15 bytes captured (120 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 10
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Source Device Name: laptop]
    [Source Role: Master (1)]
    [Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Destination Device Name: ]
    [Destination Role: Slave (2)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     64 0.320288       2f:d0:a5:b4           controller            LMP      64     LMP_power_control_req

Frame 64: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     65 0.320353       localhost ()          LiteonTe_d0:a5:b4 (laptop) L2CAP    15     Sent Information Request (Fixed Channels Supported)

Frame 65: 15 bytes on wire (120 bits), 15 bytes captured (120 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 10
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: laptop]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     66 0.320364       localhost ()          LiteonTe_d0:a5:b4 (laptop) L2CAP    25     Sent Information Response (Fixed Channels Supported, Success)

Frame 66: 25 bytes on wire (200 bits), 25 bytes captured (200 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 20
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: laptop]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     67 0.335907       controller            2f:d0:a5:b4           LMP      64     LMP_power_control_res

Frame 67: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     68 0.335914       LiteonTe_d0:a5:b4 (laptop) localhost ()          L2CAP    25     Rcvd Information Response (Fixed Channels Supported, Success)

Frame 68: 25 bytes on wire (200 bits), 25 bytes captured (200 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 20
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Source Device Name: laptop]
    [Source Role: Master (1)]
    [Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Destination Device Name: ]
    [Destination Role: Slave (2)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     69 0.335915       controller            host                  HCI_EVT  8      Rcvd Number of Completed Packets

Frame 69: 8 bytes on wire (64 bits), 8 bytes captured (64 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Number of Completed Packets
    Event Code: Number of Completed Packets (0x13)
    Parameter Total Length: 5
    Number of Connection Handles: 1
    Connection Handle: 0x000b
    Number of Completed Packets: 2

No.     Time           Source                Destination           Protocol Length Info
     70 0.335917       LiteonTe_d0:a5:b4 (laptop) localhost ()          L2CAP    17     Rcvd Connection Request (SDP, SCID: 0x0040)

Frame 70: 17 bytes on wire (136 bits), 17 bytes captured (136 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 12
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Source Device Name: laptop]
    [Source Role: Master (1)]
    [Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Destination Device Name: ]
    [Destination Role: Slave (2)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     71 0.336007       localhost ()          LiteonTe_d0:a5:b4 (laptop) L2CAP    21     Sent Connection Response - Success (SCID: 0x0040, DCID: 0x0040)

Frame 71: 21 bytes on wire (168 bits), 21 bytes captured (168 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 16
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: laptop]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     72 0.336015       localhost ()          LiteonTe_d0:a5:b4 (laptop) L2CAP    28     Sent Configure Request (DCID: 0x0040)

Frame 72: 28 bytes on wire (224 bits), 28 bytes captured (224 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 23
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: laptop]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     73 0.352129       LiteonTe_d0:a5:b4 (laptop) localhost ()          L2CAP    28     Rcvd Configure Request (DCID: 0x0040)

Frame 73: 28 bytes on wire (224 bits), 28 bytes captured (224 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 23
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Source Device Name: laptop]
    [Source Role: Master (1)]
    [Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Destination Device Name: ]
    [Destination Role: Slave (2)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     74 0.352136       controller            host                  HCI_EVT  8      Rcvd Number of Completed Packets

Frame 74: 8 bytes on wire (64 bits), 8 bytes captured (64 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Number of Completed Packets
    Event Code: Number of Completed Packets (0x13)
    Parameter Total Length: 5
    Number of Connection Handles: 1
    Connection Handle: 0x000b
    Number of Completed Packets: 2

No.     Time           Source                Destination           Protocol Length Info
     75 0.352137       LiteonTe_d0:a5:b4 (laptop) localhost ()          L2CAP    23     Rcvd Configure Response - Success (SCID: 0x0040)

Frame 75: 23 bytes on wire (184 bits), 23 bytes captured (184 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 18
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Source Device Name: laptop]
    [Source Role: Master (1)]
    [Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Destination Device Name: ]
    [Destination Role: Slave (2)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     76 0.352187       localhost ()          LiteonTe_d0:a5:b4 (laptop) L2CAP    23     Sent Configure Response - Success (SCID: 0x0040)

Frame 76: 23 bytes on wire (184 bits), 23 bytes captured (184 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 18
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: laptop]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     77 0.384099       LiteonTe_d0:a5:b4 (laptop) localhost ()          SDP      43     Rcvd Service Search Attribute Request : OBEX Object Push: Attribute Range (0x0000 - 0xffff) 

Frame 77: 43 bytes on wire (344 bits), 43 bytes captured (344 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 38
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Source Device Name: laptop]
    [Source Role: Master (1)]
    [Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Destination Device Name: ]
    [Destination Role: Slave (2)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol
Bluetooth SDP Protocol

No.     Time           Source                Destination           Protocol Length Info
     78 0.384222       localhost ()          LiteonTe_d0:a5:b4 (laptop) SDP      19     Sent Service Search Attribute Response 

Frame 78: 19 bytes on wire (152 bits), 19 bytes captured (152 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 14
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: laptop]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol
Bluetooth SDP Protocol

No.     Time           Source                Destination           Protocol Length Info
     79 0.400205       controller            host                  HCI_EVT  8      Rcvd Number of Completed Packets

Frame 79: 8 bytes on wire (64 bits), 8 bytes captured (64 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Number of Completed Packets
    Event Code: Number of Completed Packets (0x13)
    Parameter Total Length: 5
    Number of Connection Handles: 1
    Connection Handle: 0x000b
    Number of Completed Packets: 2

No.     Time           Source                Destination           Protocol Length Info
     80 0.400208       LiteonTe_d0:a5:b4 (laptop) localhost ()          L2CAP    17     Rcvd Disconnection Request (SCID: 0x0040, DCID: 0x0040, PSM: 0x0001, Service: SDP)

Frame 80: 17 bytes on wire (136 bits), 17 bytes captured (136 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 12
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Source Device Name: laptop]
    [Source Role: Master (1)]
    [Destination BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Destination Device Name: ]
    [Destination Role: Slave (2)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     81 0.400263       localhost ()          LiteonTe_d0:a5:b4 (laptop) L2CAP    17     Sent Disconnection Response (SCID: 0x0040, DCID: 0x0040, PSM: 0x0001, Service: SDP)

Frame 81: 17 bytes on wire (136 bits), 17 bytes captured (136 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
    .... 0000 0000 1011 = Connection Handle: 0x00b
    ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
    00.. .... .... .... = BC Flag: Point-To-Point (0)
    Data Total Length: 12
    Data
    [Connect in frame: 17]
    [Disconnect in frame: 84]
    [Source BD_ADDR: 00:00:00_00:00:00 (00:00:00:00:00:00)]
    [Source Device Name: ]
    [Source Role: Slave (2)]
    [Destination BD_ADDR: LiteonTe_d0:a5:b4 (40:f0:2f:d0:a5:b4)]
    [Destination Device Name: laptop]
    [Destination Role: Master (1)]
    [Last Role Change in Frame: 11]
    [Current Mode: Active Mode (0)]
    [Last Mode Change in Frame: 17]
Bluetooth L2CAP Protocol

No.     Time           Source                Destination           Protocol Length Info
     82 0.575918       controller            host                  HCI_EVT  8      Rcvd Number of Completed Packets

Frame 82: 8 bytes on wire (64 bits), 8 bytes captured (64 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Number of Completed Packets
    Event Code: Number of Completed Packets (0x13)
    Parameter Total Length: 5
    Number of Connection Handles: 1
    Connection Handle: 0x000b
    Number of Completed Packets: 1

No.     Time           Source                Destination           Protocol Length Info
     83 2.575794       2f:d0:a5:b4           controller            LMP      64     LMP_detach

Frame 83: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Sent (0x00)]
    HCI Packet Type: Unknown (0x07)
Bluetooth H4 Serial Broadcom Vendor Specific

No.     Time           Source                Destination           Protocol Length Info
     84 2.639822       controller            host                  HCI_EVT  7      Rcvd Disconnect Complete

Frame 84: 7 bytes on wire (56 bits), 7 bytes captured (56 bits) on interface bluetooth1, id 0
Bluetooth
Bluetooth HCI H4
    [Direction: Rcvd (0x01)]
    HCI Packet Type: HCI Event (0x04)
Bluetooth HCI Event - Disconnect Complete
    Event Code: Disconnect Complete (0x05)
    Parameter Total Length: 4
    Status: Success (0x00)
    Connection Handle: 0x000b
    Reason: Remote User Terminated Connection (0x13)

One question about Kernel patching

Hi,

Thank you very much that you shared the Linux Kernel patches.
I'm a very beginner on Linux, an have some questions maybe super stupid:

My kernel version is 5.3.0, Ubuntu. So I need to install the 4.14.111 kernel firstly then install your patches?
How can I install these patches? directly change the files from here to my /usr/src/xxx-headers?(I think it is incorrect)

Many thanks.

More IF files

Error with enable_diag.py after patching the kernel

Hello,

as mentioned in

I encountered the same error when executing anable_diag.py:

Traceback (most recent call last):
File "enable_diag.py", line 5, in
s.send(b"\x07\xf0\x01")
socket.error: [Errno 22] Invalid argument

After reading the other Issues to this error I patched my Linux Kernel with the Files in this repository. After patching i had the same error as before.

Do you have any ideas?
Many Thanks.

Henning.

It is no longer possible to purchase CYW920819EVB-02 dev boards to run the BIAS PoC

It would be great if you could port the PoC to an alternate device

Entering Diagnostic Mode

Maybe you know why. Somehow I cannot enter diagnostic mode:

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.

francozappa / bias Goto Github PK

bias's People

Contributors

Stargazers

Watchers

Forkers

bias's Issues

Recommend Projects

Recommend Topics

Recommend Org