The command uses the following structure:
nrfutil ble-sniffer sniff [--baudrate ARG] [--output-pcap-file ARG] [--timeout ARG] [--follow ARG] [--follow-by-name ARG] [--irk-key ARG] [--diffie-hellman-key ARG] [--legacy-ltk-key ARG] [--sc-ltk-key ARG] [--port ARG] [--rssi-cut-off ARG] [--scan-follow-rsp] [--scan-follow-aux] [--scan-follow-aux-chain] [--scan-follow-aux-rsp] [--coded] [--only-advertising] [--only-legacy_advertising] [--help]
| Long | Short | Values | Description |
|---|---|---|---|
--baudrate |
ARG |
Sniffer baud rate. Defaults to 1000000 bits/s. | |
--output-pcap-file |
ARG |
Path to file of captured Bluetooth LE data, stored in the PCAP format. Defaults to a file in current directory. | |
--timeout |
ARG |
Sniffer timeout in milliseconds. Defaults to 500 ms. | |
--follow |
ARG |
Follow device with this address. | |
--follow-by-name |
ARG |
Follow device with this user-friendly name. | |
--irk-key |
ARG |
Provide an Identity Resolve Key. Used to resolve addresses from advertising devices (only those addresses that can be resolved). | |
--diffie-hellman-key |
ARG |
Provide a Diffie-Hellman (DH) private key to be used when the connection uses LE Secure Connections pairing and you need to derive the Secure Connections Long Term Key (SC LTK) during pairing. Provide this before the pairing starts. The host sends a DH private key to the sniffer. This key is then used to authenticate the pairing event and derive the SC LTK key on bonding. Key length: 32 bytes (64 hexadecimal digits). Provide it in big-endian hexadecimal format with a 0x prefix. Use it together with --follow, --follow-by-name, or --irk-key. |
|
--legacy-ltk-key |
ARG |
Provide a Legacy Long Term Key (LTK) to be used when the devices are already bonded using legacy pairing and you have the legacy LTK. Key length: 16 bytes (32 hexadecimal digits). Provide it in big-endian hexadecimal format with a 0x prefix. Use it together with --follow, --follow-by-name, or --irk-key. |
|
--sc-ltk-key |
ARG |
Provide a Secure Connections Long Term Key (SC LTK) to be used when the devices are already bonded using LE Secure Connections and you have the SC LTK. Key length: 16 bytes (32 hexadecimal digits). Provide it in big-endian hexadecimal format with a 0x prefix. Use it together with --follow, --follow-by-name, or --irk-key. |
|
--port |
ARG |
Sniffer serial port. | |
--rssi-cut-off |
ARG |
RSSI cut-off value. | |
--scan-follow-rsp |
- | Find scan response data. | |
--scan-follow-aux |
- | Find auxiliary pointer data. | |
--scan-follow-aux-chain |
- | Find auxiliary data chain. | |
--scan-follow-aux-rsp |
- | Find auxiliary scan response data. | |
--coded |
- | Scan and follow on LE Coded PHY. | |
--only-advertising |
- | Sniff only advertising packets. | |
--only-legacy_advertising |
- | Sniff only legacy advertising packets. | |
--help |
-h |
- | Print help (see a summary with -h). |