ISCC Dump

Created by Dazban Vaz
ISCC Bluetooth Dongle HCI Dump
1 of 46
HCI Initialization
2 of 46
Device Descriptor Query 80 06 00 01 00 00 12 00

Device Descriptor result
12 01 10 01 E0 01 01 10 31 11 01 10 73 03 01 02 00 01
Configuration Descriptor
80 06 00 02 00 00 09 02
Configuration Descriptor result
09 02 BA 00 03 01 00 C0 00 09 04
02 40 00 01 07 05 82 02 40 00 01
05 83 01 00 00 01 09 04 01 01 02
01 09 04 01 02 02 E0 01 01 00 07
02 E0 01 01 00 07 05 03 01 19 00
07 05 03 01 21 00 01 07 05 83 01
00 01 07 05 83 01 31 00 01 09 04
00
09
E0
05
01
21
02
00
04
01
03
07
00
00
03
01
01
01
05
01
00
E0
00
00
11
83
09
FE
01
02
07
00
01
04
01
01
E0
05
01
19
01
00
00
01
03
07
00
05
00
07
01
01
05
01
02
05
00
09
83
09
E0
81
07
00
01
04
01
03
05
01
11
01
01
10
03
07
00
04
00
00
01
05
01
02
07
01
00
83
09
E0
05
07
00
01
04
01
03
05
01
09
01
01
01
02
07
00
03
00
31
HCI Reset command

Setup Packet
HCI Command Complete Event
03 0C 00
(0003 03)
20 00 00 00 00 00 03 00
0E 04 01 03 0C 00
HCI Write_Connection_Accept_Timeout
Setup Packet
16 0C 02 00 B0
(0016 03)
20 00 00 00 00 00 05 00
0E 04 01 16 0C 00 (for Details Refer Table 1 on Page 5)
HCI Write_Page_Timeout command

Setup Packet
18 0C 02 10 27
(0018 03)
20 00 00 00 00 00 05 00
0E 04 01 18 0C 00
HCI Read_Connection_Accept_Timeout
Setup Packet
15 0C 00
(0015 03)
20 00 00 00 00 00 03 00
0E 06 01 15 0C 00 00 B0
HCI_Read_Buffer_Size
Setup Packet
05 10 00
(0005 04)
20 00 00 00 00 00 03 00
0E 0B 01 05 10 00 A6 02 30 08 00 0A 00
HCI Set_Host_Controller_To_Host_Flow_Control
31 0C 01 00
(0031 03)
Setup Packet
20 00 00 00 00 00 04 00
0E 04 01 31 0C 00
HCI Host_Buffer_Size
Setup Packet
33 0C 07 80 02 FF A0 00 14 00
20 00 00 00 00 00 0A 00
0E 04 01 33 0C 00
HCI_Read_Local_Supported_Features
Setup Packet
03 10 00
(0003 04)
20 00 00 00 00 00 03 00
0E 0C 01 03 10 00 BF FE 8D 78 08 18 00 00
HCI Write_PIN_Type
Setup Packet
0A 0C 01 00
(000A 03)
20 00 00 00 00 00 04 00
0E 04 01 0A 0C 00
HCI Write_Scan_Enable
Setup Packet
1A 0C 01 01
(001A 03)
20 00 00 00 00 00 04 00
0E 04 01 1A 0C 00
(0033 03)
3 of 46
HCI Change_Local_Name
Setup Packet
HCI Read_Local_Name
Setup Packet
HCI Write_Class_Of_Device
Setup Packet
13
00
00
00
00
78
01
00
00
00
00
00
00
00
00
00
20
0E
0C
00
00
00
00
08
00
00
00
00
00
00
00
00
00
01
00
04
F8
00
00
00
00
18
00
00
00
00
00
00
00
00
00
00
00
01
I
49
00
00
00
04
00
00
00
00
00
00
00
00
00
00
00
00
13
14 0C 00
20 00 00 00
(248 Octets)
0E FC 01 14
00 00 00 00
00 00 00 00
00 00 00 00
00 00 00 00
00 00 00 00
00 00 00 00
00 00 00 00
S
53
00
00
00
01
00
00
00
00
00
00
00
00
00
00
00
00
0C
S
53
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
(0013
C B
43 42
00 00
00 00
00 00
01 01
00 02
00 00
00 00
00 00
00 00
00 00
00 00
00 00
00 00
00 00
00 00
FB 00
(0014
00 00 03 00
I S
0C 00 49 53
00 00 00 00
00 00 00 00
00 00 00 00
00 00 00 00
00 00 00 00
00 00 00 00
00 00 00 00
03) (248 Octets)

T A
54 41 00 00 00 00
00 00 00 00 00 00
00 00 00 00 00 00
00 00 00 00 00 00
00 0F 00 00 00 BF
00 FE 01 02 00 39
00 00 00 00 00 00
00 00 00 00 00 00
00 00 00 00 00 00
00 00 00 00 00 00
00 00 00 00 00 00
00 00 00 00 00 00
00 00 00 00 00 00
00 00 00 00 00 00
00 00 00 00 00 00
00 00 00
00
00
00
00
FE
00
00
00
00
00
00
00
00
00
00
00
00
00
00
8D
FE
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
03)
S
53
00
00
00
00
00
00
00
C
43
00
00
00
00
00
00
00
B
42
00
00
00
00
00
00
00
T
54
00
00
00
00
00
00
00
A
41
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
24 0C 03 04 01 00 (0024 03)
20 00 00 00 00 00 06 00
0E 04 01 24 0C 00
Major Device Minor Device

Major Service Class
Class
Class
23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
0x000104
0
0
0
1
0
4
0 0 0 0 0 0 0 0 0 0 0 0 0 0 01 0 0 0 0 0 1 0 0
Computer
Desktop
Workstaton
HCI Write_Authentication_Enable
Setup Packet
Authentication not required. 00 i.e. Default.
20 0C 01 00
(0020 03)
20 00 00 00 00 00 04 00
0E 04 01 20 0C 00
HCI_Read_BD_ADDR
Setup Packet
09 10 00
(0009 04)
20 00 00 00 00 00 03 00
0E 0A 01 09 10 00 11 11 11 11 11 11
HCI Read_Class_Of_Device
Setup Packet
23 0C 00
(0023 03)
20 00 00 00 00 00 03 00
0E 07 01 23 0C 00 04 01 00
4 of 46
Setup Packet
03 10 00
(0003 04) !!!
20 00 00 00 00 00 03 00
0E 0C 01 03 10 00 BF FE 8D 78 08 18 00 00
HCI
Setup Packet
07 10 00
(0007 04)
20 00 00 00 00 00 03 00
0E 05 01 07 10 00 00
HCI_Read_Local_Version_Information
Setup Packet
01 10 00
(0001 04)
20 00 00 00 00 00 03 00
0E 0C 01 01 10 00 02 FE 01 02 39 00 FE 01
1byte
2byte
1byte
HCI Version HCI Revision LMP Version
02
01FE
2
???
2byte
2byte
Manufacturer_Name LMP Subversion
0039
01FE
Setup Packet
03 10 00
(0003 04)
!!!
20 00 00 00 00 00 03 00
0E 0C 01 03 10 00 BF FE 8D 78 08 18 00 00
HCI
Setup Packet
07 10 00
(0007 04)
20 00 00 00 00 00 03 00
0E 05 01 07 10 00 00
Setup Packet
01 10 00
(0001 04)
20 00 00 00 00 00 03 00
0E 0C 01 01 10 00 02 FE 01 02 39 00 FE 01
Setup Packet
01 10 00
(0001 04)
20 00 00 00 00 00 03 00
0E 0C 01 01 10 00 02 FE 01 02 39 00 FE 01
vendor-specific debug commands

Setup Packet
1B
20
0E
BD
Setup Packet
23 0C 00
(0023 03)
20 00 00 00 00 00 03 00
0E 07 01 23 0C 00 04 01 00
Setup Packet
24 0C 03 04 01 02 (0024 03)
20 00 00 00 00 00 06 00
0E 04 01 24 0C 00
FC
00
14
11
00
00 00 00 00
01 1B FC 00
D0 57 0E 6B
???
(001B 3F)
!!!
03 00
DA B4 24 E7 17 9B BD DA 82
3B
Major Device Minor Device

Major Service Class
Class
Class
23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
0x020104
0
2
0
1
0
4
0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 1 0 0
Networking
Setup Packet
23 0C 00
(0023 03)
20 00 00 00 00 00 03 00
0E 07 01 23 0C 00 04 01 02
Setup Packet
24 0C 03 04 01 12 (0024 03) (Object Transfer)

20 00 00 00 00 00 06 00
0E 04 01 24 0C 00
5 of 46
Setup Packet
23 0C 00
(0023 03)
20 00 00 00 00 00 03 00
0E 07 01 23 0C 00 04 01 12
HCI Write_Scan_Enable
Setup Packet
1A 0C 01 03
(001A 03)
20 00 00 00 00 00 04 00
0E 04 01 1A 0C 00
Inquiry Scan enabled. Page Scan enabled 03

Setup Packet
23 0C 00
(0023 03)
20 00 00 00 00 00 03 00
0E 07 01 23 0C 00 04 01 12
Setup Packet
24 0C 03 04 01 12 (0024 03) (Object Transfer)

20 00 00 00 00 00 06 00
0E 04 01 24 0C 00
HCI_Write_Encryption_Mode
Setup Packet
22 0C 01 00
(0022 03) Encryption not required.
20 00 00 00 00 00 04 00
0E 04 01 22 0C 00
HCI Write_Connection_Accept_Timeout Packet
Table 1
6 of 46
HCI Inquiry
7 of 46
HCI_Set_Event_Filter
05 0C 02 01 00
(0005 03) 01 Inquiry Result
Setup Packet
20 00 00 00 00 00 05 00
0E 04 01 05 0C 00
00 Return responses from all devices during the Inquiry process
HCI_Inquiry
Setup Packet
HCI Command_Status_Event
Inquiry_Length -> 17.92secs 0E
01 04 05 33 8B 9E 0E 00 (0001 01)
20 00 00 00 00 00 08 00
0F 04 00 01 01 04
LAP (GIAC) -> 9E8B33
Inquiry_Result_Event
Unlimited number of responses -> 00
02 0F 01 B1 6B D0 DE 15 00 01 02 00 04 02 5A
5C 76
Base Address of JBPs mobile 00:15:DE:D0:6B:B1
Class of Device 5A 02 04
02 0F 01 56 0E 7C D2 12 00 01 02 00 04 02 52
2C 77
02 0F 01 8A 1B 77 A0 15 00 01 02 00 0C 02 50
75 25
HCI Inquiry_Complete_Event
01 01 00
HCI Remote_Name_Request
Setup Packet
Command_Status_Event
Remote_Name_Request_Complete_Event
19
20
0F
07
32
00
00
00
00
00
00
04
00
04
FF
38
00
00
00
00
00
00
0A
00
00
00
30
00
00
00
00
00
00
B1
00
01
B1
00
00
00
00
00
00
00
6B
00
19
6B
00
00
00
00
00
00
00
D0
00
04
D0
00
00
00
00
00
00
00
DE 15 00 01 00 5C F6 (0019 01)
0D 00
DE
00
00
00
00
00
00
00
15
00
00
00
00
00
00
00
Base Address of JBPs mobile 00:15:DE:D0:6B:B1

JBPs Remote name
4E 6F 6B 69 61 36 32 38 30
00
00
00
00
00
00
00
00
4E
00
00
00
00
00
00
00
6F
00
00
00
00
00
00
00
6B
00
00
00
00
00
00
00
69
00
00
00
00
00
00
00
61
00
00
00
00
00
00
00
20
00
00
00
00
00
00
00
(i.e. Nokia 6280)
8 of 46
36
00
00
00
00
00
00
00
HCI Connection
And
Service Discovery
9 of 46
HCI Create_Connection
Setup Packet
Connection_Complete_Event
05 04 0D B1 6B D0 DE 15 00 18 CC 01 00 5B F6 01
(0005 01)
20 00 00 00 00 00 10 00
0F 04 00 01 05 04
03 0B 00 01 00 B1 6B D0 DE 15 00 01 00
HCI Write_Link_Policy_Settings
0D 08 04 01 00 07 00
(000D 02)
HCI ACL Data Packet(Service Discovery) 01 20 0C 00 08 00 01 00 02 01 04 00 01 00 40 00
(for detail refer Table 1 on Page 10)
Setup Packet
20 00 00 00 00 00 07 00
Max_Slots_Change_Event
1B 03 01 00 05
Command_Complete_Event
0E 06 01 0D 08 00 01 00
Number_Of_Completed_Packets_Event
13 05 01 01 00 01 00
Connection_Packet_Type_Changed_Event 1D 05 00 01 00 18 CC
HCI ACL Data Packet(Config Req)
01 20 10 00 0C 00 01 00 04 01 08 00 40 00 00 00
01 02 FF FF (for detail refer Table 2 on Page 10)
HCI ACL Data Packet(Config Req)
00 40 00 00 00
on Page 10)
00 40 00 00 00
on Page 11)
01 20 0C 00 08 00 01 00 04 02 04
(for detail refer Table 3
HCI ACL Data Packet(Config Response) 01 20 0E 00 0A 00 01 00 05 01 06
00 00
(for detail refer Table 4
13 05 01 01 00 01 00
13 05 01 01 00 01 00
HCI ACL Data Packet(Config Response) 01 20 0E 00 0A 00 01 00 05 02 06
00 00
00 40 00 00 00
HCI Read_Clock_Offset Remote device

Setup Packet
Read_Clock_Offset_Complete_Event
HCI ACL Data Packet sent
(Service request Packet)
1F
20
0F
1C
01
01
13
04
00
04
05
20
00
05
02
00
00
00
11
00
01
01
00
01
01
00
20
01
00
00
1F
00
0D
00
00
(001F 01)
00 05 00
04
85 13
00 40 00 02 00 00 00 08 35 03 19
(for detail refer Table 5 on Page 12)
01 00
HCI ACL Data Packet received
01
11
29
2E
33
37
20
00
00
00
00
00
52
01
01
01
01
01
00
00
00
00
00
00
4E
26
2A
30
34
38
00
00
00
00
00
00
(Service response Packet)
HCI ACL Data Packet

(Service Attribute request)
(Service Attribute response)
(Dial Up Networking)
40 00 03 00 00 00 49 00 11 00
01 00 27 00 01 00 28 00 01 00
01 00 2C 00 01 00 2D 00 01 00
01 00 31 00 01 00 32 00 01 00
01 00 35 00 01 00 36 00 01 00
(for details refer Table 6 on Page 12)
01 20 17 00 13 00 40
26 01 2C 35 05 0A 00
(for details refer Table 8
13 05 01 01 00 01 00
01 20 6D 00 69 00 40
00 5E 09 00 00 0A 00
11 03 19 12 01 09 00
05 19 00 03 08 01 09
06 35 09 09 65 6E 09
08 35 06 19 11 03 09
61 6C 2D 75 70 20 6E
00
00 04 00 01 00 0E 00 01 00
00 FF FF 00
on Page 19)
00
01
04
00
00
01
65
05
00
35
05
6A
00
74
00
26
0C
35
09
09
77
01
09
35
03
01
01
6F
00
00
03
19
00
00
72
64
01
19
10
09
25
6B
00
35
01
02
00
12
69
61
06
00
09
09
44
6E
0x44 69 61 6C 2D 75 70 20 6E 65 74 77 6F 72 6B 69 6E 67 Dial-up networking
10 of 46
36
19
35
00
35
69
67
HCI ACL Data Packet

01 20 17 00 13 00 40 00 04 00 02
27 01 2C 35 05 0A 00 00 FF FF 00
(For details refer Table 9 on Page 13)
13 05 01 01 00 01 00
01 20 59 00 55 00 40 00 05 00 02
00 4A 09 00 00 0A 00 01 00 27 09
11 01 09 00 04 35 0C 35 03 19 01
03 08 0F 09 00 05 35 03 19 10 02
09 65 6E 09 00 6A 09 01 00 09 01
6B 69 61 20 50 43 20 53 75 69 74
00 0E 00 01 00
00
00
00
09
00
65
50
01
35
00
25
00
00
35
05
06
0E
4D
03
19
35
4E
36
19
00
09
6F
0x00010027 ServiceRecordHandle
HCI ACL Data Packet
01 20 17 00 13 00 40 00 04 00 03
28 01 2C 35 05 0A 00 00 FF FF 00
13 05 01 01 00 01 00
01 20 50 00 4C 00 40 00 05 00 03
00 41 09 00 00 0A 00 01 00 28 09
11 01 09 00 04 35 0C 35 03 19 01
03 08 03 09 00 05 35 03 19 10 02
09 65 6E 09 00 6A 09 01 00 09 01
4D 20 31 00
00 0E 00 01 00
00
00
00
09
00
47
01
35
00
25
00
35
05
06
05
44
03
19
35
43
36
19
00
09
4F
0x43 4F 4D 20 31 00 COM1
HCI ACL Data Packet
01 20 17 00 13 00 40 00 04 00 04
29 01 2C 35 05 0A 00 00 FF FF 00
13 05 01 01 00 01 00
01 20 73 00 6F 00 40 00 05 00 04
00 64 09 00 00 0A 00 01 00 29 09
11 1F 19 12 03 09 00 04 35 0C 35
05 19 00 03 08 0D 09 00 05 35 03
06 35 09 09 65 6E 09 00 6A 09 01
08 35 06 19 11 1E 09 01 05 09 01
69 63 65 20 47 61 74 65 77 61 79
09 03 11 09 00 0F 00
00 0E 00 01 00
00
00
03
19
00
00
09
6A
01
19
10
09
25
03
00
35
01
02
00
0D
01
67
06
00
09
09
56
08
36
19
35
00
35
6F
01
0x56 6F 69 63 65 20 47 61 74 65 77 61 79 Voice Gateway

HCI ACL Data Packet
01 20 17 00 13 00 40 00 04
2A 01 2C 35 05 0A 00 00 FF
(For details refer Table 7 on Page
13 05 01 01 00 01 00
01 20 68 00 64 00 40 00 05
00 59 09 00 00 0A 00 01 00
11 12 19 12 03 09 00 04 35
05 19 00 03 08 0C 09 00 05
06 35 09 09 65 6E 09 00 6A
08 35 06 19 11 08 09 01 00
64 69 6F 20 47 61 74 65 77
00 05 00 0E 00 01 00
FF 00
13)
00
2A
0C
35
09
09
61
05
09
35
03
01
01
79
00
00
03
19
00
00
00
5F
01
19
10
09
25
00
35
01
02
00
0D
5C
06
00
09
09
41
0x41 75 64 69 6F 20 47 61 74 65 77 61 79 Audio Gateway
11 of 46
36
19
35
00
35
75
HCI ACL Data Packet

HCI ACL Data Packet

HCI ACL Data Packet

HCI ACL Data Packet

HCI ACL Data Packet

01 20 17 00 13 00 40 00 04 00
2C 01 2C 35 05 0A 00 00 FF FF
13 05 01 01 00 01 00
01 20 3A 00 36 00 40 00 05 00
00 2B 09 00 00 0A 00 01 00 2C
00 00 50 01 00 00 10 00 80 00
09 00 04 35 08 35 06 19 01 00
06 00 0E 00 01 00
00
06
09
00
09
00
00
02
54
31
01
EE
01
00 2E 36
35 11 1C
00 00 01
00
01 20 17 00 13 00 40 00 04
2D 01 2C 35 05 0A 00 00 FF
13 05 01 01 00 01 00
01 20 3E 00 3A 00 40 00 05
00 2F 09 00 00 0A 00 01 00
00 00 50 02 00 00 10 00 80
09 00 04 35 0C 35 03 19 01
0E 00
00 07 00 0E 00 01 00
FF 00
13)
01 20 17 00 13 00 40 00 04
2E 01 2C 35 05 0A 00 00 FF
13 05 01 01 00 01 00
01 20 3A 00 36 00 40 00 05
00 2B 09 00 00 0A 00 01 00
00 00 50 03 00 00 10 00 80
09 00 04 35 08 35 06 19 01
00 08 00 0E 00 01 00
FF 00
13)
01 20 17 00 13 00 40 00 04
30 01 2C 35 05 0A 00 00 FF
13 05 01 01 00 01 00
01 20 3E 00 3A 00 40 00 05
00 2F 09 00 00 0A 00 01 00
00 00 55 57 00 00 10 00 80
09 00 04 35 0C 35 03 19 01
18 00
00 09 00 0E 00 01 00
FF 00
13)
00
2D
00
00
00
2E
00
00
00
30
00
00
01 20 17 00 13 00 40 00 04 00
31 01 2C 35 05 0A 00 00 FF FF
13 05 01 01 00 01 00
01 20 74 00 70 00 40 00 05 00
00 65 09 00 00 0A 00 01 00 31
11 05 09 00 04 35 11 35 03 19
03 08 09 35 03 19 00 08 09 00
09 00 06 35 09 09 65 6E 09 00
09 35 08 35 06 19 11 05 09 01
4F 42 45 58 20 4F 62 6A 65 63
09 03 03 35 02 08 FF 00
07
09
00
35
08
09
00
09
09
09
00
35
00
00
02
05
00
00
02
58
00
00
02
05
35
01
EE
19
31
01
EE
01
35
01
EE
19
00
35
00
00
32
11
00
03
00 2E 36
35 11 1C
00 00 01
00
00
35
00
00
32
11
00
03
36
1C
10
08
0A 00 0E 00 01 00
00
0A
09
01
05
6A
00
74
00
00
00
35
09
09
20
6B
01
35
03
01
01
50
00
35
05
19
00
00
75
68
03
19
10
09
25
73
0x4F 42 45 58 20 4F 62 6A 65 63 74 20 50 75 73 68 OBEX Object Push
36
1C
01
08
12 of 46
36
19
00
02
00
10
68
HCI ACL Data Packet

01 20 17 00 13 00 40
32 01 2C 35 05 0A 00
(For details refer Table 7
13 05 01 01 00 01 00
01 20 6F 00 6B 00 40
00 60 09 00 00 0A 00
11 06 09 00 04 35 11
03 08 0A 35 03 19 00
09 00 06 35 09 09 65
09 35 08 35 06 19 11
4F 42 45 58 20 46 69
65 72 00
00 04 00 0B 00 0E 00 01 00
00 FF FF 00
on Page 13)
00
01
35
08
6E
06
6C
05
00
03
09
09
09
65
00
32
19
00
00
01
20
0B
09
01
05
6A
00
54
00
00
00
35
09
09
72
66
01
35
03
01
01
61
00
35
05
19
00
00
6E
63
03
19
10
09
25
73
36
19
00
02
00
12
66
0x4F 42 45 58 20 46 69 6C 65 20 54 72 61 6E 73 66 65 72 OBEX File Transfer

HCI ACL Data Packet
01 20 17 00 13 00 40
33 01 2C 35 05 0A 00
13 05 01 01 00 01 00
01 20 69 00 65 00 40
00 5A 09 00 00 0A 00
00 00 56 01 00 00 10
09 00 04 35 11 35 03
07 35 03 19 00 08 09
6A 09 01 00 09 01 00
79 6E 63 4D 4C 20 53
00 04 00 0C 00 0E 00 01 00
00 FF FF 00
on Page 13)
00
01
00
19
00
25
65
05
00
80
01
06
13
72
00
33
00
00
35
4E
76
0C
09
00
35
09
6F
65
00
00
02
05
09
6B
72
60
01
EE
19
65
69
00
00
35
00
00
6E
61
5D
11
00
03
09
20
36
1C
01
08
00
53
0x4E 6F 6B 69 61 20 53 79 6E 63 4D 4C 20 53 65 72 Nokia SyncML Server

HCI ACL Data Packet
01 20 17 00 13 00 40
34 01 2C 35 05 0A 00
13 05 01 01 00 01 00
01 20 6B 00 67 00 40
00 5C 09 00 00 0A 00
00 00 00 02 00 00 10
09 00 04 35 11 35 03
0B 35 03 19 00 08 09
06 35 09 09 65 6E 09
0D 53 79 6E 63 4D 4C
00 04 00 0D 00 0E 00 01 00
00 FF FF 00
on Page 13)
00
01
00
19
00
00
20
05
00
80
01
05
6A
43
00
34
00
00
35
09
6C
0D
09
00
35
03
01
69
00
00
02
05
19
00
65
62
01
EE
19
10
09
6E
00
35
00
00
02
01
74
5F
11
00
03
09
00
00
36
1C
02
08
00
25
0x53 79 6E 63 4D 4C 20 43 6C 69 65 6E 74 SyncML Client

HCI ACL Data Packet
01 20 17 00 13 00 40
35 01 2C 35 05 0A 00
13 05 01 01 00 01 00
01 20 78 00 74 00 40
00 69 09 00 00 0A 00
11 0A 09 00 04 35 10
06 19 00 19 09 01 00
00 06 35 09 09 65 6E
35 08 35 06 19 11 0D
75 73 69 63 2D 50 6C
4E 6F 6B 69 61 09 03
00 04 00 0E 00 0E 00 01 00
00 FF FF 00
on Page 13)
00
01
35
09
09
09
61
11
05
00
06
00
00
01
79
09
00
35
19
05
6A
00
65
00
0E
09
01
35
09
09
72
01
00
00
00
03
01
01
09
00
6F
01
09
19
00
00
01
00
35
00
10
09
25
02
6C
03
19
02
00
0C
25
0x4D 75 73 69 63 2D 50 6C 61 79 65 72 Music-Player
13 of 46
36
19
35
09
09
4D
05
HCI ACL Data Packet

01 20 17 00 13 00 40
36 01 2C 35 05 0A 00
13 05 01 01 00 01 00
01 20 78 00 74 00 40
00 69 09 00 00 0A 00
11 0C 09 00 04 35 10
06 19 00 17 09 01 00
00 06 35 09 09 65 6E
35 08 35 06 19 11 0E
65 64 69 61 20 50 6C
4E 6F 6B 69 61 09 03
00 04 00 0F 00 0E 00 01 00
00 FF FF 00
on Page 13)
00
01
35
09
09
09
61
11
05
00
06
00
00
01
79
09
00
36
19
05
6A
00
65
00
0F
09
01
35
09
09
72
03
00
00
00
03
01
01
09
00
6F
01
09
19
00
00
01
00
35
00
10
09
25
02
6C
03
17
02
00
0C
25
36
19
35
09
09
4D
05
0x4D 65 64 69 61 20 50 6C 61 79 65 72 Media Player

HCI ACL Data Packet
01 20 17 00 13 00 40
37 01 2C 35 05 0A 00
13 05 01 01 00 01 00
01 20 78 00 74 00 40
00 69 09 00 00 0A 00
11 0E 09 00 04 35 10
06 19 00 17 09 01 00
00 06 35 09 09 65 6E
35 08 35 06 19 11 0E
65 64 69 61 20 50 6C
4E 6F 6B 69 61 09 03
00 04 00 10 00 0E 00 01 00
00 FF FF 00
on Page 13)
00
01
35
09
09
09
61
11
05
00
06
00
00
01
79
09
00
37
19
05
6A
00
65
00
10
09
01
35
09
09
72
02
00
00
00
03
01
01
09
00
6F
01
09
19
00
00
01
00
35
00
10
09
25
02
6C
03
17
02
00
0C
25
36
19
35
09
09
4D
05
0x4D 65 64 69 61 20 50 6C 61 79 65 72 Media Player
HCI ACL Data Packet

01 20 17 00 13 00 40
38 01 2C 35 05 0A 00
13 05 01 01 00 01 00
01 20 65 00 61 00 40
00 56 09 00 00 0A 00
11 2D 19 12 04 09 00
05 19 00 03 08 04 09
06 35 09 09 65 6E 09
08 35 06 19 11 2D 09
4D 20 41 43 43 45 53
00 04 00 11 00 0E 00 01 00
00 FF FF 00
on Page 13)
00
01
04
00
00
01
53
05
00
35
05
6A
01
00
00
38
0C
35
09
09
11
09
35
03
01
01
00
00
03
19
00
00
5C
01
19
10
09
25
00
35
01
02
00
0A
59
06
00
09
09
53
36
19
35
00
35
49
0x53 49 4D 20 41 43 43 45 53 53 SIM ACCESS

HCI ACL Data Packet
Service Search Attribute request
01 20 0C 00 08 00 01 00 06 03 04 00 40 00 40 00
(for details refer Table 7 on Page 13)
13 05 01 01 00 01 00
01 20 0C 00 08 00 01 00 07 03 04 00 40 00 40 00
Service Search Attribute response
14 of 46
HCI Remote_Name_Request
Setup Packet
Remote_Name_Request_Complete_Event
19
20
0F
07
32
00
00
00
00
00
00
00
00
00
00
00
00
00
00
04
00
04
FF
38
00
00
00
00
00
00
00
00
00
00
00
00
00
00
0A
00
00
00
30
00
00
00
00
00
00
00
00
00
00
00
00
00
00
B1
00
01
B1
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
6B
00
19
6B
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
D0
00
04
D0
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
HCI Disconnect
Setup Packet
Disconnection_Complete_Event
06
20
0F
05
04
00
04
04
03
00
00
00
01
00
01
01
00
00
06
00
13
00 06 00
04
16
DE 15 00 01 00 85 93 (0019
0D 00
(Refer Page 7)
DE 15 00 4E 6F 6B 69 61 20
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
01)
36
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
15 of 46
HCI ACL Data Packet Connection request for Service Discovery
Table 1
1. PSM Protocol/Service Multiplexor 0x0001 represents connection request for
Service Discovery Protocol
2. Code 0x02 represents CONNECTION REQUEST
3. All signaling commands are sent through CID 0x0001
Go Back
Below packet represents Configuration request
16 of 46
Table 2
Configuration request packet
Table 3
Go Back
Configure response packet
Table 4
17 of 46
SDP Service Search Request Packet
Table 5
1. Above packet is for SDP Service Search Request, sent from Host to device.
2. The field from PDU Header to Connection state, represents data payload for L2CAP header
3. The payload is basically a SDP query for Service search request.
4. The data length 0x000D under L2CAP header is excluding CID
5. PDU ID carries the for SDP Service Search Request command.
6. The L2CAP UUID is rearranged from 00 01 to 0100 since SDP fields are Big Endian
Go Back..
SDP_Service Search Response Packet
Connection
Handle +
Flags
HCI ACL Header
00
11
00
49
00
00
00
03
00
40
00
4E
00
52
20
01
00
00
00
00
01
01
01
01
00
00
00
00
28
2D
32
36
00
00
00
00
01
01
01
01
00
00
00
00
27
2C
31
35
00
00
00
00
01
01
01
01
00
00
00
00
00
26
2A
30
34
38
00
00
00
00
00
01
01
01
01
01
00
00
00
00
00
11
29
2E
33
37
Parameter
Length
PDU ID
Host to device
L2CAP Header
Transactio
nID
PDU Header
CID
Length
Length
Table 6
1. Above packet is for SDP Service Search Responset, sent from device to Host.
2. PDU ID carries the for SDP Service Search Response command
3. Value 0x0011 next to Parameter length is Total Service record count
4. The following 0x0011 marked in green is Current Service record count
5. Values 0x00010026 to 0x00010038 represents Service record handle i.e. total 17 service record handle in above packet
6. Final value 0x00 represent Continuation state.
Go Back
18 of 46
SDP_ServiceAttributeRequest PDU
Table 7
1. PDU ID 0x04 represent SDP_ServiceAttributeRequest PDU
2. The ServiceRecordHandle 0x00010026 varies for different service request
3. The TransactionID varies for different service request in ascending order
Go Back..
19 of 46
Dial-Up Networking Packet

B
0x0000
0x0010
0x0020
0x0030
0x0040
0x0050
0x0060
0x0070
36
19
35
00
35
69
67
61
06
00
09
09
44
6E
00
35
01
02
00
12
69
64
01
19
10
09
25
6B
8
7
6
5
4
Host to device
PDU Header
L2CAP Header
00
00
03
19
00
00
72
00
26
0C
35
09
09
77
05
00
35
05
6A
00
74
01
09
35
03
01
01
6F
CID
00
01
04
00
00
01
65
40
00
00
09
09
09
6E
HCI ACL Header
Length
Length
00
0A
09
01
6E
03
20
00
00
12
03
09
19
75
69
00
01
08
65
11
70
6D
09
19
00
09
06
2D
Connection
Handle +
Flags
PDU ID
TransactionI
D
Parameter
Length
20
5E
03
19
35
35
6C
Table 8
01
00
11
05
06
08
61
00
Go Back
Explanation about each field is described below

AttributeList[97]
DataElementSequence[]
AttributeID
ForServiceRecordHandle
Attribute Value
AttributeValue
DataElementSequence
0x09
0 0 0 0 1
Unsigned Integer
005E
0x001F
0 0 1
2 bytes
0x0013
0x0000
AttributeID
0x0016
0x00 01 00 26
0x001A
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
0x19
0 1 1
UUID
UUID[3]
Generic Networking
0x0010
0x09
0x0012
0 0 0 0 1 0 0 1
Unsigned Integer 2 bytes
0x0A
0x0015
0 0 0 0 1 0 1 0
Unsigned Integer
2 bytes
AttributeID
ServiceClassIDList
UUID[3]
DUN
0x36
0x000F
0 0 1 1 0 1 1 0
Unsigned Integer
16 bit
ServiceRecordHandle
0x001B
0x0001
0x001D
0x001E
0 1
8 bits
0x06
AttributeID
0x0020
0x1103
0x19
0x0022
0x0023
0 0 0 1 1 0 0 1 0x1201
UUID
2 bytes
20 of 46
AttributeID
ProtocolDescriptorList
ServiceRecordHandle
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
UUID[3]
L2CAP
0x19
0 1 1
UUID
AttributeValue
DataElementSequence
UUID[3]
RFCOMM
Server
Channel
0x002C
UUID[3]
PublicBrowseGroup
0x0029
0 1
8 bits
0x0C
0x002A
0x002B
0 1
8 bits
0x03
0x002F
0x0030
0 1
8 bits
0x05
0x0032
0x0003
0x0035
0x01
0x0036
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
0x0037
0x0005
0x0039
0x003A
0 1
8 bits
0x03
AttributeID
0x19
0x003B
0x003C
0 0 0 1 1 0 0 1 0x1002
UUID
2 bytes
AttributeID
LanguageBaseAttribute
IDList
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
0x0031
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x0028
AttributeID
0x0100
0 0 1
2 bytes
0x08
0x0034
0 0 0 0 1 0 0 0
UUID
2 bytes
0x0026
0x0004
0x002D
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
0x19
0 1 1
UUID
AttributeID
BrowseGroupList
0x0025
0 0 1
2 bytes
0x003E
0 0 1
2 bytes
0x003F
0x0006
0x0041
0x0042
0 1
8 bits
0x09
AttributeID
21 of 46
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x0043
0x0046
0x0049
AttributeID
BluetoothProfile
DescriptorList
0x0044
0x656E
Language Identifier
0x0047
0x006A
Character Encoding Identifier
0x004A
0x0100
0x09
0 0 0 0 1
Unsigned Integer
baseAttributeID
0x004C
0 0 1
2 bytes
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
UUID[3]
DUN
0x19
0 1 1
UUID
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x25
0 1 0 1
Text String
0x0056
0x0059
0x0053
0 0 1
2 bytes
0x004D
0x0009
0x004F
0x0050
0 1
8 bits
0x08
0x0051
0x0052
0 1
8 bits
0x06
AttributeID
0x0054
0x1103
0x0057
0x0100
Version
0x005A
0x0100
baseAttributeID
0x005C
0x005D
1 0
16 bit
0x12
Size of String
Offset 0x005E to 0x006F is text string Dial-Up Networking

Explanation for Dial-Up Networking end here
Note: Number marked in red signifies that the data lies at that offset position in
Table 8
e.g. 0x25 in above table lies at offset position 0x005C in Table 8
22 of 46
RFCOMM Serial Port Packet

E
9 8 7 6 5
Host to device
HCI ACL Frame
L2CAP Frame
SDP Frame
0x0000
0x0010
0x0020
0x0030
0x0040
0x0050
36
19
00
09
6F
4D
03
19
35
4E
00
35
05
06
0E
50
01
35
00
25
00
00
00
00
09
00
65
02
09
01
02
01
74
L2CAP Header
CID
00 05 00
27 00 01
19 03 35
10 19 03
09 00 01
69 75 53
Table 9
Length Length
40
00
0C
35
09
20
00
0A
35
05
6A
43
HCI ACL Header
PDU ID
Parameter
Length
TransactionI
D
PDU Header
Connection
Handle +
Flags
55
00
04
00
00
50
00
00
00
09
09
20
59
09
09
0F
6E
61
20
4A
01
08
65
69
01
00
11
03
09
6B

AttributeList[97]
AttributeID
Attribute Value
AttributeValue
DataElementSequence
0x0010
004A
0x09
0x0012
0 0 0 0 1 0 0 1
0x0A
0x0015
0 0 0 0 1 0 1 0
Unsigned Integer
2 bytes
AttributeID
ServiceClassIDList
UUID[3]
Serial Port
0x36
0x000F
0 0 1 1 0 1 1 0
Unsigned Integer
16 bit
0x09
0 0 0 0 1
Unsigned Integer
0x35
0 0 1 1 0
Unsigned Integer
0x19
0x001F
0 0 0 1 1 0 0 1
UUID
2 bytes
AttributeID
0x0016
0x00 01 00 27
0x001A
0 0 1
2 bytes
0x0013
0x0000
ServiceRecordHandle
0x001B
0x0001
0x001D
0x001E
0 1
8 bits
0x03
AttributeID
0x0020
0x1101
23 of 46
AttributeID
ServiceRecordHandle
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
UUID[3]
L2CAP
0x19
0 1 1
UUID
AttributeValue
DataElementSequence
UUID[3]
RFCOMM
Server
Channel
0x0029
UUID[3]
PublicBrowseGroup
0x0C
0x0027
0x0028
0 1
8 bits
0x03
0 1
8 bits
0x002D
0x05
0x002F
0x0003
0x0032
0x0F
0x0033
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
0x0034
0x0005
0x0036
0x0037
0 1
8 bits
0x03
AttributeID
0x19
0x0038
0x0039
0 0 0 1 1 0 0 1 0x1002
UUID
2 bytes
AttributeID
IDList
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
0x0026
0 1
8 bits
0x002C
0x002E
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x0025
AttributeID
0x0100
0 0 1
2 bytes
0x08
0x0031
0 0 0 0 1 0 0 0
UUID
2 bytes
0x0023
0x0004
0x002A
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
0x19
0 1 1
UUID
AttributeID
BrowseGroupList
0x0022
0 0 1
2 bytes
0x003B
0 0 1
2 bytes
0x003C
0x0006
0x003E
0x003F
0 1
8 bits
0x09
AttributeID
24 of 46
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x25
0 1 0 1
Text String
0x0040
0x0043
0x0046
0x0049
0x0041
0x656E
Language Identifier
0x0044
0x006A
0x0047
0x0100
baseAttributeID
0x004A
0x0100
baseAttributeID
0x004C
0x004D
1 0
16 bit
0x0E
Size of String
Offset 0x004E to 0x005B is text string

Explanation for RFCOMM Serial Port end here
Go Back
25 of 46
RFCOMM Serial Port Packet COM1

E
8
7
6
Host to device
HCI ACL Frame
L2CAP Frame
SDP Frame
36
19
00
09
4F
44
03
19
35
43
00
35
05
06
05
47
01
35
00
25
00
00
00
09
00
PDU ID
0x0000
0x0010
0x0020
0x0030
0x0040
0x0050
00
28
19
10
09
05
00
03
19
00
03
09
01
02
01
L2CAP Header
TransactionI
D
Parameter
Length
PDU Header
CID
00
01
35
03
01
00
0A
35
05
6A
HCI ACL Header
Length
40
00
0C
35
09
4C
00
04
00
00
Length
00
00
00
09
09
00
50
09
09
03
6E
31
Connection
Handle +
Flags
20
41
01
08
65
20
01
00
11
03
09
4D
Table 10
AttributeList[97]
AttributeID
Attribute Value
AttributeValue
DataElementSequence
0x09
0 0 0 0 1
Unsigned Integer
0041
0x0013
0x0000
AttributeID
0x0016
0x00 01 00 28
0x001A
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
0x19
0x001F
0 0 0 1 1 0 0 1
UUID
2 bytes
AttributeID
ServiceRecordHandle
0x0010
0x09
0x0012
0 0 0 0 1 0 0 1
0x0A
0x0015
0 0 0 0 1 0 1 0
Unsigned Integer
2 bytes
AttributeID
ServiceClassIDList
UUID[3]
Serial Port
0x36
0x000F
0 0 1 1 0 1 1 0
Unsigned Integer
16 bit
ServiceRecordHandle
0x001B
0x0001
0x001D
0x001E
0 1
8 bits
0x03
AttributeID
0x0020
0x1101
0x09
0 0 0 0 1
Unsigned Integer
0x0022
0 0 1
2 bytes
0x0023
0x0004
AttributeID
26 of 46
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
UUID[3]
L2CAP
0x19
0 1 1
UUID
AttributeValue
DataElementSequence
UUID[3]
RFCOMM
Server
Channel
0x0029
AttributeID
BrowseGroupList
0 1
8 bits
0x002D
0x05
0x0032
0x03
0x0033
0 0 1
2 bytes
0x0034
0x0005
0x0036
0x0037
0 1
8 bits
0x03
AttributeID
0x19
0x0038
0x0039
0 0 0 1 1 0 0 1 0x1002
UUID
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
0x03
0x002F
AttributeID
IDList
0x09
0 0 0 0 1
Unsigned Integer
0x0028
0 1
8 bits
0x0003
0x35
0 0 1 1 0
Unsigned Integer
UUID[3]
PublicBrowseGroup
0x0027
0x002C
0x002E
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x0C
0x0100
0 0 1
2 bytes
0x08
0x0031
0 0 0 0 1 0 0 0
UUID
2 bytes
0x0026
0 1
8 bits
0x002A
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
0x19
0 1 1
UUID
0x0025
0x0040
0 0 1
2 bytes
0x003B
0 0 1
2 bytes
0x003C
0x0006
0x003E
0x003F
0 1
8 bits
0x09
AttributeID
0x0041
0x656E
Language Identifier
27 of 46
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x25
0 1 0 1
Text String
0x0043
0x0046
0x0049
0x0044
0x006A
0x0047
0x0100
baseAttributeID
0x004A
0x0100
baseAttributeID
0x004C
0x004D
1 0
16 bit
0x05
Size of String
Offset 0x004E to 0x005B is text string COM 1

Explanation for RFCOMM Serial Port end here
Go Back
28 of 46
HandsFree Audio Gateway Packet

E
9
8
7
6
Host to device
HCI ACL Frame
L2CAP Frame
SDP Frame
36
19
35
00
35
6F
01
67
06
00
09
09
56
08
00
35
01
02
00
0D
01
6A
01
19
10
09
25
03
00
00
03
19
00
00
09
PDU ID
0x0000
0x0010
0x0020
0x0030
0x0040
0x0050
0x0060
0x0070
TransactionI
D
Parameter
Length
PDU Header
00
29
0C
35
09
09
61
05
00
35
05
6A
05
77
04
09
35
03
01
01
79
L2CAP Header
HCI ACL Header
CID
Length
Length
00
0A
09
0D
6E
1E
61
0F
00
00
12
03
09
19
20
09
00
01
04
00
00
01
65
40
00
00
09
09
09
74
00
6F
00
03
08
65
11
47
00
73
09
19
00
09
06
65
11
Connection
Handle +
Flags
20
64
1F
19
35
35
63
03
01
00
11
05
06
08
69
09
Table 11

AttributeList[97]
AttributeID
Attribute Value
0x36
0x000F
0 0 1 1 0 1 1 0
Unsigned Integer
16 bit
0x0A
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
UUID[3]
HandsfreeAudioGateway
0064
0x09
0x0012
0 0 0 0 1 0 0 1
0 0 0 0 1
Unsigned Integer
AttributeID
ServiceClassIDList
0x0010
0x0015
0x00 01 00 29
0x001A
0x35
0 0 1 1 0
Unsigned Integer
AttributeID
0x0016
1 0
2 bytes
0 0 1
2 bytes
0x0013
0x0000
ServiceRecordHandle
0x001B
0x0001
0x001D
0x001E
0 1
8 bits
0x06
0x19
0x001F
0 0 0 1 1 0 0 1
UUID
2 bytes
AttributeID
0x0020
0x111F
29 of 46
UUID[3]
HandsfreeAudioGateway
0x19
0x0022
0 0 0 1 1 0 0 1
UUID
2 bytes
AttributeID
ServiceRecordHandle
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
UUID[3]
L2CAP
0x19
0 1 1
UUID
AttributeValue
DataElementSequence
UUID[3]
RFCOMM
Server
Channel
0x002C
UUID[3]
PublicBrowseGroup
AttributeID
IDList
0x0028
0x0029
0 1
8 bits
0x0C
0x002A
0x002B
0 1
8 bits
0x03
AttributeID
0x0100
0x0031
0x002F
0x0030
0 1
8 bits
0x05
0x0032
0 0 1
2 bytes
0x0003
0x0035
0x0D
0x09
0 0 0 0 1
Unsigned Integer
AttributeValue
DataElementSequence
0x0004
0x002D
0 0 1
2 bytes
0x08
0x0034
0 0 0 0 1 0 0 0
UUID
2 bytes
0x0026
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
0x19
0 1 1
UUID
AttributeID
BrowseGroupList
0x0025
0x0023
0x1203
0x0036
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
0x0037
0x0005
0x0039
0x003A
0 1
8 bits
0x03
AttributeID
0x19
0x003B
0x003C
0 0 0 1 1 0 0 1 0x1002
UUID
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0x003E
0 0 1
2 bytes
0x003F
0x0006
AttributeID
30 of 46
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x0043
0x0046
0x0049
AttributeID
BluetoothProfile
DescriptorList
0x0047
0x006A
0x004A
0x0100
baseAttributeID
0x004C
0 0 1
2 bytes
0x35
0 0 1 1 0
Unsigned Integer
AttributeValue
DataElementSequence
0x35
0 0 1 1 0
Unsigned Integer
0x004D
0x0009
0x004F
0x0050
0 1
8 bits
0x08
0x0051
0x0052
0 1
8 bits
0x06
AttributeID
0x19
0x0053
0x0054
0 0 0 1 1 0 0 1 0x111E
UUID
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x09
0 0 0 0 1
Unsigned Integer
0 0 1
2 bytes
0x25
0 1 0 1
Text String
0x09
Language Identifier
AttributeValue
DataElementSequence
0x0042
0 1
8 bits
0x0044
0x656E
0x09
0 0 0 0 1
Unsigned Integer
UUID[3]
HandsFree
0x0041
0x0056
0x0059
0x0057
0x0105
Version
0x005A
0x0100
baseAttributeID
0x005C
0x005D
1 0
16 bit
0x0D
Size of String
Offset 0x005E to 0x006A is text string Voice Gateway

0x09
0x006B
0x006C
Supported Data
0 0 0 0 1 0 0 1 0x0301
Stores List
Refer BluetoothBluetooth_assigned_numbers_SDP.pdf page 6
31 of 46
0x08
0x006E
0x006F
Data
0 0 0 0 1 0 0 0 0x01
Stores
UUID
2 bytes
Refer Synchronization Profile Part K:13 13_syp.pdf page 23
Supported Features
0x09
0 0 0 0 1
Unsigned Integer
0x0070
0 0 1
2 bytes
0x0071
0x0311
0x09
0x0073
0x0074
0 0 0 0 1 0 0 1 0x000F
Unsigned Integer
2 bytes
Refer HANDS-FREE PROFILE 1.5 HFP 1[1].5_SPEC_V10.pdf 83
0x00 at Offset 0x0076 represents Continuation State.
Explanation for HandsFree Audio Gateway Packet end here
Go Back
32 of 46
RFCOMM Connection
33 of 46
HCI Create_Connection
Setup Packet
Connection_Complete_Event
Base Address 0x00 15 DE D0 6B B1
05 04 0D B1 6B D0 DE 15 00 18 CC 01 00 85 93 01
(0005 01)
20 00 00 00 00 00 10 00
0F 04 00 01 05 04
03 0B 00 01 00 B1 6B D0 DE 15 00 01 00
Link Type = 01
ACL Connection (Data Channel)
HCI L2CAP Connection Request
01 20 0C 00 08 00 01 00 02 0A 04 00 01 00 43 00
HCI Write_Link_Policy_Settings
0D 08 04 01 00 07 00
(000D 02)
Setup Packet
20 00 00 00 00 00 07 00
Max_Slots_Change_Event
1B 03 01 00 05
Command_Complete_Event
0E 06 01 0D 08 00 01 00
13 05 01 01 00 01 00
Connection_Packet_Type_Changed_Event 1D 05 00 01 00 18 CC
HCI L2CAP Connection Response
01 20 10 00 0C 00 01 00 03 0A 08 00 40 00 43 00
00 00 00 00
HCI L2CAP Configure Request
HCI L2CAP Configure Response

HCI SDP Service Search Request
SDP Service Search Response
HCI SDP Service Attribute Request
SDP Service Attribute Response
01 20 0C 00 08 00 01 00 04 0B 04 00 40 00 00 00
01 20 10 00 0C 00 01 00 04 04 08 00 43 00 00 00
01 02 FF FF
01
00
13
01
00
13
20
00
05
20
00
05
0E 00 0A 00 01 00 05 04 06 00 40 00 00 00
01 01 00 01 00
0E 00 0A 00 01 00 05 0B 06 00 43 00 00 00
01 01 00 01 00
01 20 11
11 01 00
13 05 01
01 20 16
02 00 01
(For details
00 0D 00 40 00 02 00 00 00 08 35 03 19
20 00 (For details refer Table 18 on Page 35)
01 00 01 00
00 12 00 43 00 03 00 00 00 0D 00 02 00
00 27 00 01 00 28 00
refer Table 19 on Page 35)
01 20 17 00 13 00 40 00 04 00 01
27 01 2C 35 05 0A 00 00 FF FF 00
13 05 01 01 00 01 00
01 20 59 00 55 00 40 00 05 00 02
00 4A 09 00 00 0A 00 01 00 27 09
11 01 09 00 04 35 0C 35 03 19 01
03 08 0F 09 00 05 35 03 19 10 02
09 65 6E 09 00 6A 09 01 00 09 01
6B 69 61 20 50 43 20 53 75 69 74
00 0E 00 01 00
00
00
00
09
00
65
50
01
35
00
25
00
00
35
05
06
0E
4D
03
19
35
4E
34 of 46
36
19
00
09
6F
HCI SDP Service Attribute Request
SDP Service Attribute Response
HCI L2CAP Disconnection Request

L2CAP Disconnection Response
01 20 17 00 13 00 40 00 04 00 02
28 01 2C 35 05 0A 00 00 FF FF 00
13 05 01 01 00 01 00
01 20 50 00 4C 00 40 00 05 00 03
00 41 09 00 00 0A 00 01 00 28 09
11 01 09 00 04 35 0C 35 03 19 01
03 08 03 09 00 05 35 03 19 10 02
09 65 6E 09 00 6A 09 01 00 09 01
4D 20 31 00
00 0E 00 01 00
00
00
00
09
00
47
01
35
00
25
00
35
05
06
05
44
03
19
35
43
36
19
00
09
4F
01 20 0C 00 08 00 01 00 06 0C 04 00 40 00 43 00
13 05 01 01 00 01 00
01 20 0C 00 08 00 01 00 07 0C 04 00 40 00 43 00
HCI L2CAP Connection Request

L2CAP Connection response
01
13
01
00
20
05
20
00
0C
01
10
00
00 08 00 01 00 02 0D 04 00 03 00 44 00
01 00 01 00
00 0C 00 01 00 03 0D 08 00 40 00 44 00
00
01
01
13
01
01
20
02
05
20
02
10
40
01
10
04
00 0C 00 01 00 04 0E 08 00 40 00 00 00
06
01 00 01 00
00 0C 00 01 00 04 05 08 00 44 00 00 00
80
01
00
13
01
00
20
00
05
20
00
0E 00 0A 00 01 00 05 05 06 00 40 00 00 00

01 01 00 01 00
12 00 0E 00 01 00 05 0E 0A 00 44 00 00 00
01 02 40 06
HCI RFCOMM SABM Frame

HCI RFCOMM UA Frame
01 20 08 00 04 00 40 00 03 3F 01 1C
13 05 01 01 00 01 00
01 20 08 00 04 00 44 00 03 73 01 D7
HCI RFCOMM PN Command
01
00
13
01
00
20
E6
05
20
E2
12
05
01
12
05
00
00
01
00
00
0E
07
00
0E
00
00 40 00 03 EF 15 83 11 06 F0 00
70
01 00
00 44 00 01 EF 15 81 11 06 E0 00
AA
01
00
13
01
00
20
E2
05
20
E2
12
05
01
12
05
00
00
01
00
00
0E
07
00
0E
00
00 40 00 03 EF 15 83 11 06 F0 00
70
01 00
00 44 00 01 EF 15 81 11 06 E0 00
AA
HCI RFCOMM PN Response
HCI RFCOMM PN Command

HCI RFCOMM PN Response
HCI RFCOMM SABM Frame

01 20 08 00 04 00 40 00 1B 3F 01 D3
13 05 01 01 00 01 00
HCI Link Key Request Event

HCI Link_Key_Request_Negative_Reply
Setup Packet
17
0C
20
0E
06
04
00
0A
B1
06
00
01
6B
B1
00
0C
D0
6B
00
04
DE
D0
00
00
15
DE
0D
B1
00
15 00
00
6B D0 DE 15 00
(000C 01)
35 of 46
HCI PIN_Code_Request_Event
HCI PIN_Code_Request_Reply
16
0D
D0
20
0E
Setup Packet
HCI Link Key Notification
06
04
DE
00
0A
B1
17
15
00
01
6B
B1
00
00
0D
D0
6B
00
00
04
DE
D0
00
00
00
15
DE
00
0D
B1
00
15 00 05 31 35 39 37 33 6B
00 00 00
(000D 01)
00
6B D0 DE 15 00
Page 24
18 17 B1 6B D0 DE 15 00 FD 87 67 3B 99 C1 5E B3
55 75 5A 3D E7 5A 1C 20 00
Base Address 0x0015DED06B

Key Type 00
Link_Key FD 87 67 3B 99 C1 5E B3 55 75 5A 3D E7 5A 1C 20
Change Connection Link Key Complete
09 03 00 01 00
Status 00 Change_Connection_Link_Key command succeeded.

01 00
Connection Handle
Encryption Change Event
Link Level Encryption is ON
08 04 00 01 00 01
01.
36 of 46
RFCOMM L2CAP Connection Request packet
Table 12
Go Back.
RFCOMM L2CAP Connection Response packet
Table 13
37 of 46
RFCOMM L2CAP Configuration request Packet
Table 14
Go Back
RFCOMM L2CAP Configuration request Packet
Table 15
38 of 46
RFCOMM L2CAP Configuration response Packet
Table 16
RFCOMM L2CAP Configuration response Packet
Table 17
Go Back..
39 of 46
SDP Service Search Request Packet
Table 18
SDP Service Search Response Packet
Table 19
Go Back..
40 of 46
SDP Service Attribute Request Packet
Table 20
Go Back..
41 of 46
L2CAP Disconnection request Packet
Table 21
Go Back
L2CAP Disconnection request Packet
Table 22
42 of 46
RFCOMM Connection Request Packet
Table 23
RFCOMM Connection Request Packet
Table 24
43 of 46
L2CAP Configuration Request Packet
Table 25
L2CAP Configuration Request Packet
Table 26
44 of 46
L2CAP Configuration Response Packet
Table 27
L2CAP Configuration Response Packet
Table 28
45 of 46
RFCOMM SABM Packet
Table 29
46 of 46

ISCC Dump

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

ISCC Dump

Transféré par

Droits d'auteur :

Formats disponibles

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

ISCC Bluetooth Dongle HCI Dump

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

Device Descriptor Query 80 06 00 01 00 00 12 00

HCI Reset command

HCI Write_Page_Timeout command

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

03) (248 Octets)

Major Device Minor Device

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

vendor-specific debug commands

Major Device Minor Device

24 0C 03 04 01 12 (0024 03) (Object Transfer)

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

Inquiry Scan enabled. Page Scan enabled 03

24 0C 03 04 01 12 (0024 03) (Object Transfer)

HCI Write_Connection_Accept_Timeout Packet

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

Unlimited number of responses -> 00

Base Address of JBPs mobile 00:15:DE:D0:6B:B1

Base Address of JBPs mobile 00:15:DE:D0:6B:B1

Created by Dazban Vaz

(i.e. Nokia 6280)

ISCC Bluetooth Dongle HCI Dump

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

HCI ACL Data Packet(Config Req)

HCI Read_Clock_Offset Remote device

HCI ACL Data Packet received

(Service response Packet)

HCI ACL Data Packet

0x44 69 61 6C 2D 75 70 20 6E 65 74 77 6F 72 6B 69 6E 67 Dial-up networking

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

HCI ACL Data Packet

0x56 6F 69 63 65 20 47 61 74 65 77 61 79 Voice Gateway

0x41 75 64 69 6F 20 47 61 74 65 77 61 79 Audio Gateway

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

HCI ACL Data Packet

HCI ACL Data Packet

HCI ACL Data Packet

HCI ACL Data Packet

HCI ACL Data Packet

0x4F 42 45 58 20 4F 62 6A 65 63 74 20 50 75 73 68 OBEX Object Push

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

HCI ACL Data Packet

0x4F 42 45 58 20 46 69 6C 65 20 54 72 61 6E 73 66 65 72 OBEX File Transfer

0x4E 6F 6B 69 61 20 53 79 6E 63 4D 4C 20 53 65 72 Nokia SyncML Server

0x53 79 6E 63 4D 4C 20 43 6C 69 65 6E 74 SyncML Client

Created by Dazban Vaz

ISCC Bluetooth Dongle HCI Dump

HCI ACL Data Packet

0x4D 65 64 69 61 20 50 6C 61 79 65 72 Media Player

0x4D 65 64 69 61 20 50 6C 61 79 65 72 Media Player