Teledyne Merlin II User Manual

3385 Scott Blvd, Santa Clara, CA 95054 Tel: +1/408.727.6600 Fax: +1/408.727.6622

CATC Merlin II

™

Bluetooth™ Protocol Analyzer

User’s Manual

Manual Revision 2.50

For Software Version 2.50

18 July, 2004

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Document Disclaimer

The information contained in this document has been carefully checked and is believed to be reliable. However, no responsibility can be assumed for inaccuracies that may not have been detected.

CATC reserves the right to revise the information presented in this document without notice or penalty.

Trademarks and Servicemarks

CATC, Merlin II, BTTracer, BTTrainer, Merlin, Merlin’s Wand, Merlin Mobile, and BusEngine are trademarks of Computer Access Technology

Corporation.

Microsoft, Windows NT, Windows 2000, Windows 98SE, Windows ME, and Windows XP are registered trademarks of Microsoft Inc.

All other trademarks are property of their respective companies.

This document may be printed and reproduced without additional permission, but all copies should contain this copyright notice.

FCC Conference Statement

This equipment has been tested and found to comply with the limits for a Class A digital device and an intentional radiator, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at their own expense. The end user of this product should be aware that any changes or modifications made to this equipment without the approval of CATC could result in the product not meeting the Class A limits, in which case the FCC could void the user's authority to operate the equipment.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Important Notice: To comply with FCC RF exposure requirements (sections 1.1307 and 1.310 of the Rules) only the antenna supplied by CATC must be used for this device. The anten na must be loca ted at least 20 cm away from all persons.

FCC Testing applies to FCC ID: KH7BT006UAA-X.

EU Conference Statement

This equipment complies with the R&TT Directive 1999/5/EC. It has been tested and found to comply with EN55022:1994/A1:1995/A2:1997 Class A, EN61000-4-2:1995, EN61000-4-3:1995, EN61000-4-4:1995, EN61000-4-5:1995, EN61000-4-6:1995, EN61000-4-11:1994, EN61010-1:1993, and ESTI EN 300 328-1 V1.2.2 (2000-07).

Manual Version 2.50 Part number: 730-0055-00

iii

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

TABLE OF CONTENTS

Chapter 1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Bluetooth™ Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1

General Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2

Automation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

Physical Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4

Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4

Recording Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4

Bluetooth BusEngine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5

Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6

Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6

Power Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6

Radio. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

Environmental Conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

Recording Size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

Host Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

Chapter 2 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

System Components/Packing List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Analyzer LED Descriptions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Rear Panel Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Setting Up the Analyzer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Installing the Analyzer Software on the PC. . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Your First Bluetooth Recording. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

Inquiry Recording. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

External Interface Breakout Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

Connecting the Breakout Board . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16

Configuring the Analyzer for the Breakout Board . . . . . . . . . . . . . . . . .16

Chapter 3 Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Update Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

Automatic Updates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

Software, Firmware, and BusEngine Versions . . . . . . . . . . . . . . . . . . . . . . . . . .19

Software Updates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19

License Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Updating the Software License. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Chapter 4 Software Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

The Main Display Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

Toolbar. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26

Status Bar. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Recording Progress. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Status Bar Position Definitions: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Recording Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34

Analyzer Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34

Search Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Zooming In and Out. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Zoom In. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Zoom Out . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Tool Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Merlin II Analyzer Keyboard Shortcuts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

Chapter 5 Recording Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Starting Recording Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37

Recording a Traffic on a New Piconet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38

Recording an Existing Piconet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48

Recording in Test Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .57

Recording in Reduced Hopping Mode . . . . . . . . . . . . . . . . . . . . . . . . . .57

Recording in Single Frequency Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61

Chapter 6 Recording Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Recording Modes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

Piconet recording . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

Inquiry recording . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

UT:HCI mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6 6

Opening the Recording Options Dialog Box. . . . . . . . . . . . . . . . . . . . . . . . . . . .66

Recording Options - General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6 7

Recording type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67

Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67

Buffer Size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68

Trigger Position . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69

Recording Options - Piconet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69

Frequency Hopping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69

Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71

Synchronization Method. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71

Recording When Already Synchronized. . . . . . . . . . . . . . . . . . . . . . . . .73

When to Use the Different Piconet Recording Modes . . . . . . . . . . . . . .73

Loss of Sync Timeout (1-30 secs) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

Force Re-synchronization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

Show Paging Traffic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

Follow Anonymity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

Advanced ... . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

Recording Options - HCI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80

Recording Options - Inquiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .81

Recording Options - Events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82

Payload Length Error. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

Recording Options - Actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Action Buttons - Their Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Blue Dot Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 2

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Saving Recording Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

Recording Bluetooth Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

Taking "Snapshots" during a Long Recording. . . . . . . . . . . . . . . . . . . . . . . . . . .97

Chapter 7 Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99

General Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100

Setting Color, Formatting, and Hiding Options. . . . . . . . . . . . . . . . . . . . . . . . .101

Setting Color Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101

Changing Field Formats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102

Hiding Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103

Level Hiding Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103

Level Hiding Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103

Saving Display Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105

Chapter 8 Reading a CATC Trace . . . . . . . . . . . . . . . . . . . . . . . 107

Trace View Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107

Interpreting the Displayed Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107

Timing Analysis. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108

Tooltips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109

Set Marker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109

Edit or Clear Marker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .110

Setting Markers While Recording . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

Adding Comments to a Trace File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

Expanded and Collapsed Data Formats. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112

Hide Frequency Hops. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113

Hide Nulls and Polls. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113

Menus in Clicked Fields. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

Hide Unassociated Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

Hide Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

Hide Duplicated Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

Chapter 9 Searching Traces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

Search Menu. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

Go to Trigger. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

Go to Packet/Message/Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

Go to Marker. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116

Go to . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116

Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

Soft Bit Error. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

Loss of Sync . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

Find . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

Event Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122

Union, Intersection, and Exclusion. . . . . . . . . . . . . . . . . . . . . . . . . . . .125

Using Find. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126

Find Next . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .128

Chapter 10 Decoding Protocols. . . . . . . . . . . . . . . . . . . . . . . . . . 129

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129

vii

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

LMP and L2CAP Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129

Decoding and Viewing Higher Protocol Data . . . . . . . . . . . . . . . . . . . . . . . . . .130

Decoding Via the Decoding Toolbar . . . . . . . . . . . . . . . . . . . . . . . . . .130

Decoding Via the Display Options Dialog Box . . . . . . . . . . . . . . . . . .131

Tooltips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131

Viewing Packets in LMP and L2CAP Messages. . . . . . . . . . . . . . . . . . . . . . . .132

Types of LMP and L2CAP Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .132

Viewing L2CAP Channel Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133

Viewing Protocol Messages and Transactions. . . . . . . . . . . . . . . . . . . . . . . . . .134

Viewing L2CAP Messages in Protocol Messages . . . . . . . . . . . . . . . .134

How to Decode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134

Expanding Protocol Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134

Decoding via the Profiles Toolbar. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135

Changing Protocol Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135

Using the Decoding Assignments Dialog Box . . . . . . . . . . . . . . . . . . .136

Removing User-Assigned Protocol Assignments. . . . . . . . . . . . . . . . .137

Manually Assigning Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138

Other Assignments: OBEX Client/Server Status . . . . . . . . . . . . . . . . .138

Changing an OBEX Client or Server Status. . . . . . . . . . . . . . . . . . . . .139

Decoding BNEP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

Decoding HID. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

Other Decoding Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140

Configuring Merlin II for Encryption. . . . . . . . . . . . . . . . . . . . . . . . . .140

Re-applying Encryption Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .142

Chapter 11 Reports & Exporting Data . . . . . . . . . . . . . . . . . . . 145

Combining Report Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145

Device List. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .146

Traffic Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148

Error Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148

Bus Utilization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .149

Real-Time Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152

Real-Time Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .153

File Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .157

Timing Calculations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .158

Exporting Trace Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159

Exporting To Text Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .160

Exporting Trace Data to a .CSV Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .160

Exporting Audio Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .161

Appendix A: Merlin II Clock Calibration . . . . . . . . . . . . . . . . . 163

Procedure: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .163

Appendix B: HCI Probe Description . . . . . . . . . . . . . . . . . . . . . 167

Connecting the HCI Probe. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .168

2-port RS232 to USB converter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .170

viii

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Appendix C: Export Audio Streams . . . . . . . . . . . . . . . . . . . . . . 173

File Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173

RIFF Chunk Type. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173

Format Chunk - "fmt " . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173

Data Chunk - "data" . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173

Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .176

How to Contact CATC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179

Limited Hardware Warranty . . . . . . . . . . . . . . . . . . . . . . . . . . . 179

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

1. Overview

The CATC Merlin II™ Protocol Analyzer is the newest member of CATC's industry-leading line of high performance, Bluetooth protocol analyzers. Preceded by CATC’s BTTracer™, Merlin™ and Merlin Mobile™ Analyzers, Merlin II has been designed using the same modular architecture that made its predecessors highly successful in the serial bus protocol analyzer market worldwide.

1.1 Bluetooth™ Overview

The Bluetooth wireless technology is set to revolutionize the personal connectivity market by providing freedom from wired connections. It is a specification for a small-form factor, low-cost radio solution providing links between mobile computers, mobile phones and other portable handheld devices, and connectivity to the internet.

The Bluetooth Special Interest Group (SIG), comprised of leaders in the telecommunications, computing, and network industries, is driving development of the technology and bringing it to market. The Bluetooth SIG includes promoter companies 3Com, Ericsson, IBM, Intel, Lucent, Microsoft, Motorola, Nokia and Toshiba, and more than 2500 SIG members.

Bluetooth is a radio technology specification designed to transmit both voice and data wirelessly, providing an easier way for a variety of mobile computing, communications and other devices to communicate with one another without the need for cables. Bluetooth could make possible what is being called the personal-area network by allowing users to transmit small amounts of data at 1M bit/sec with a range of 10 to 100 meters, depending the power of the radio, over the 2.4-GHz radio frequency. The key benefits of the Bluetooth technology are robustness, low complexity, low power and low cost. Bluetooth employs a rapid frequency hopping mechanism to minimize the effects of ‘collisions’ with other protocols and devices operating in the same frequency band. Mechanisms exist for a Bluetooth device to determine all devices in range as well as to request connection to a piconet as either a master or a slave.

Please refer to the Bluetooth Specification, version 1.2 for details on the protocol. The Bluetooth specification is available from the Bluetooth SIG at its web site http://www.bluetooth.org/

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

1.2 General Description

The Merlin II Protocol Analyzer is designed as a stand-alone unit that can be easily configured and controlled by a portable or desktop PC connected via its USB port. Merlin II provides users with the familiar ‘CATC Trace’ user interface that is the de facto industry standard for documenting the performance of high-speed serial protocols.

Merlin II supports the functionality required to analyze all levels, including the baseband, of the Bluetooth wireless protocol. The featured Radio Interface allows users to probe and analyze transactions at the lowest level within the Bluetooth architecture. By creating this "Point of Observation" or probing point within the radio level packet view, the user can analyze all levels of the protocol stack.

Merlin II is a non-intrusive testing tool for Bluetooth piconets providing network traffic capture and analysis. Hardware triggering allows real-time events to be captured from a piconet. Hardware filtering allows the filtering out of fields, packets, and errors from the recording. Filtering allows users to focus recordings on events of interest and to preserve recording memory so that the recording time can be extended.

Recorded data is presented in colored graphics in a trace viewer application. This application has advanced search and viewing capabilities that allow the user to quickly locate specific data, errors and other conditions, thereby focussing the user’s attention on events of interest.

Merlin II functions with any personal computer using the Windows 98SE, Windows 2000, Windows ME, or Windows XP operating systems and equipped with a functional USB interface. For an updated set of system requirements for the host machine, please refer to the readme file.

The Analyzer is configured and controlled through a personal computer USB port. It can be used with portable computers for field service and maintenance as well as with desktop units in a development environment. The Analyzer is easily installed by connecting a cable between the computer’s USB port and the Analyzer’s USB port.

Merlin II provides on-the-fly detection of and triggering on such events as Packet Headers and Errors. Whether recording manually or with a specified trigger condition, Merlin II continuously records the bus data in a wrap-around fashion until manually stopped or until the Trigger Event is detected and a specified post-Trigger amount of bus data is recorded.

Upon detection of a triggering event, the analyzer continues to record data up to a point specified by the user. Real-time detection of events can be individually enabled or disabled to allow triggering on events as they

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

happen. This includes predefined exception or error conditions and a user-defined set of trigger events. The unit can also be triggered by an externally supplied signal. The breakout board provides a path for externally supplied trigger or timing data to be recorded along with bus traffic.

The breakout board also provides a path for Merlin II to transmit a trigger signal.

The Merlin II software provides powerful search functions that enable investigation of particular events and allow the software to identify and highlight specific events. In addition to immediate analysis, you can print any part of the data. Use the Save As feature to save the data on disk for later viewing. The program also provides a variety of timing information and data analysis reports.

1.3 Automation

The Merlin II software includes an Application Program Interface (API) for developing testing programs and scripts in C++ and Visual Basic. The API reproduces most of the commands embodied in the Merlin II trace viewer software. This API allows users to automate procedures that otherwise have to be run manually via the trace viewer software. The Automation API can be run locally on the PC attached to Merlin II or remotely over a network connection.

For further details, refer to the Automation API for CATC Bluetooth Analyzers reference manual included in the installation CD-ROM. You can also download the document from the CATC website.

1.4 Features

General

• Small form factor for mobility and easy placement.

• Flexible design - reconfigurable hardware for future enhancements.

• User friendly - the Graphical User Interface software of Merlin II Analyzer is designed to be consistent with the ‘CATC Trace’ using color and graphics to display Bluetooth traffic.

• Radio Level Point of Observation and Capture - traffic capture at the Radio Level for comprehensive analysis.

• Complies with Bluetooth v1.2 specification.

• Supports point-to-point and point-to-multipoint Bluetooth piconets.

• Spool data to hard drive allowing for long recording sessions.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

• Automatic tracking of ESCO and Anonymity Modes.

• Supports 79 frequency hop standards, reduced frequency, fixed frequency, and AFH.

• Automatic tracking of changes in the hopping scheme.

• Automatic tracking of whitened and non-whitened packets and traffic.

• Real time viewing of events and statistics.

• Free non-recording, view-only software available.

• Power-on self-diagnostics.

• Compliant with FCC class A requirements / meets all CE mark requirements.

• Three year warranty and hot-line customer support.

Physical Components

Note For an updated description of requirements for the host machine, please refer to

the readme file.

• External small "power brick." Can also be powered by PS/2 power cable.

• Trace viewer software support for Microsoft Windows versions 98SE and later.

Display Options

• Analyzes and displays a transaction-level view of piconet traffic with accurate time-stamps and frequency hop information.

• Software analysis and data presentation at several protocol levels: Baseband, LMP, HCI, L2CAP, SDP, RFCOMM, TCS, OBEX, HDLC, BNEP, PPP, AT, HCRP, IP, TCP, UDP, HID, AVCTP, and AVDTP.

• Supports the following profiles: GAP, CIP, CTP, HCRP, HID, Intercom Profile, LPP, PAN, SDAP, SPP, UDI, DUN, FAX, GEOP, HF, HP, LAN, PAP, SAP, VCP, BPP, BIP, FTP, OPP, Synchronization Profile, GAVDP, A2DP, AVRCP, VDP

Recording Options

• Flexible advanced triggering capabilities including - multiple triggering modes, selective views, timing analysis, search functions, protocol packet errors, transaction errors, packet type and destination device, data patterns, or any of these trigger types in combination.

• User defined trigger position.

• Support for various piconet characteristics by enabling the user to configure the synchronization method and recording parameters.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

• Real-time hardware filtering of captured traffic for optimizing analyzer memory usage.

Bluetooth BusEngine

CATC’s BusEngine™ Technology is at the heart of the new Merlin II Analyzer. The revolutionary BusEngine core uses state-of-the-art FPGA technology and incorporates both the real-time recording engine and the configurable building blocks that implement data/state/error detection, triggering, capture filtering, external signal monitoring and event counting & sequencing. And like the flash-memory-based firmware that controls its operation, all BusEngine logic is fully field upgradeable, using configuration files that can be downloaded from the CATC Website.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

1.5 Specifications

Package

Width: 6.05 inches (15.5 cm) Depth: 3.0 inches (7.6 cm) Height: 1.07 inches (2.7 cm) Weight: 8.8 oz (246 grams)

Power Requirements

5V, 800mA The provided external power supply operates on 100V-240V AC 50Hz - 60A

Connectors: DC power connection (for connecting the external power

supply or the PS/2 power cable) Mini DIN Host connection (USB, type ’B’) Antenna (reverse polarity SMA)

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Radio

Bluetooth v1.1 qualified Class 2 FCC and CE compliant

Environmental Conditions

Operating Range: 0 to 55 °C (32 to 131 °F) Storage Range: -20 to 80 °C (-4 to 176 °F) Humidity: 10 to 90%, non-condensing

LEDs

Status (STATUS) Illuminates blue when the analyzer is functioning properly

Synchronized (SYNC):

Flashes yellow during acquisition of the traffic hop sequence, illuminates when analyzer is locked to the hop sequence.

Recording (REC): Illuminates green when analyzer is actively recording data.

Recording Size

Internal 32 MB and Disk spooling capabilities provide large virtual memory for long for recording sessions

Host Compatibility

Requires a PC with a USB port Supports Windows 98/ME/NT/2000

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

2. Installation

The Merlin II Protocol Analyzer components and software are easily installed and quickly ready to run on most Windows-based personal computer systems. You can begin making Bluetooth recordings after following these initial steps.

2.1 System Components/Packing List

• One stand-alone Merlin II Analyzer

• One Antenna

• One External Interface Breakout Board with a Mini DIN cable

• One External Power Supply

• One PS/2 Power Cable

• One USB cable

• Merlin II software program installation CD

• User’s Manual

2.2 Analyzer LED Descriptions

The Merlin II analyzer has three LEDs. From left to right, these LEDs are:

A Blue Status indicator LED Blinks fast during initialization/power up.

Stead on if unit is functioning properly. Blinks slowly if a self-test fails..

B Yellow Sync (Synchronize) LED (Flashing indicates that the analyzer is

tracking the defined slave or master device. Illuminated indicates that the analyzer is tracking an active piconet.)

C Green Rec (recording) LED (lights when the unit is recording).

2.3 Rear Panel Description

USB type "B" host computer connector

This connector links the analyzer to the PC that will be administering it.

Mini DIN Connector

This connector allows the analzyer to transmit and receive external signals via a mini DIN cable to a Break Out Board for the purpose of triggering on external input signals and for clock calibration.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Power connector for external power supply

This connectors is used to attach the external power supply or for connecting the analyzer with the provided PS/2 cable from a mouse or keyboard serial port on the PC or laptop. The PS/2 cable is a pass-through type that allows you to connect the cable to the PC and then plug the mouse or keyboard into the back of the PS/2 cable.

2.4 Setting Up the Analyzer

To set up a Merlin II system,

Step 1 Attach the Antenna to the ANT connection point on the analyzer.

The antenna should point up.

Step 2 Connect the provided external power supply to the analyzer and then

to a 100-volt to 240-volt, 50 Hz to 60 Hz, 100 W power outlet. Alternatively, you can connect the PS/2 cable into the analyzer and one of your PS/2 ports (i.e. keyboard or mouse ports). The keyboard or mouse would then plug into the back of the PS/2 cable.

Note At power-on, the analyzer initializes itself in approximately ten seconds and

performs an exhaustive self-diagnostic that lasts about five seconds. The status LED flashes during the power-on testing and turns on steadily if the unit is functioning properly when testing is finished. If the diagnostics fail, the status LED blinks slowly, indicating a hardware failure. If this occurs, call CATC Customer Support for assistance.

Step 3 Connect the USB cable between the USB port on the back of the

analyzer and a USB port on the analyzing PC.

The host operating system detects the analyzer and begins to install the USB driver.

2.5 Installing the Analyzer Software on the PC

Once Merlin II has been recognized as a USB device, install the Merlin II software on the PC administering the analyzer.

Step 1 Insert the Merlin II Suit e C D into the CD ROM dr ive of th e

PC that will be administering the Analyzer.

Step 2 Follow Windows on-screen Plug-and-Play instructions for the

automatic installation of the Merlin I I Analyzer as a USB device on your analyzing PC (the required USB files are included on the Merlin II CD.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Step 3 Select Install Software from the installation CD and follow the

on-screen installation instructions.

The Merlin II application will install on the PC hard disk.

Step 4 To start the application, launch the CATC Merlin II program from

the Start Menu: Start>Programs>CATC>Merlin II.

The Merlin II program opens.

The window shows a menu bar and toolbar at the top, a grey trace viewing area covering most of the window, and a status bar at the bottom.

Opening a sample trace will cause most of the buttons on the toolbar to become active.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

To open a trace,

Step 1 Select File > Open from the menu. A dialog box opens.

Step 2 Select a file from the dialog box and click Open. A trace opens in

the main viewing area. When traffic has been recorded, it will display here.

Note The software may be used with or without the analyzer box. When used without

an analyzer box attached to the computer, the program functions as a Trace Viewer to view, analyze, and print captured protocol traffic.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

2.6 Your First Bluetooth Recording

After installing and launching the software, you can test Merlin II by creating an inquiry recording. In this test, Merlin II will issue a General Inquiry that asks local devices to identify themselves. Merl in II then records the responses.

Inquiry Recording

To create an inquiry recording, perform the following steps:

Step 1 Click the down-arrow on the right side of the

Record:Piconet button on the toolbar .

A sub-menu appears with options for Piconet Recording Mode, and Inquiry Recording Mode.

Step 2 Select Inquiry Recording Mode.

The button changes appearance and shows the label Record: Inquiry

Step 3 From the menu, select Setup > Recording Options.

The Recording Options dialog opens with the Inquiry page displaying.

Step 4 If desired, make any changes to the options, then click OK. Step 5 Click the button (i.e. not the down-arrow.)

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Merlin II starts to record the Bluetooth traffic immediately using the settings from the Piconet page in the Recording Options dialog . The Bluetoo th Inquiry p rocess will proceed for whatever amount of time is set for creating an Inquiry action (the default is 11 seconds). After the inquiry time has elapsed, the analyzer will upload the data and display the packets. In addition, the Device List window will open and display the updated statuses of the devices.

The screen should look like the sample recording below which shows the FHS packets generated during the Inquiry process.

When the recording session is finished, the bus traffic is saved to the hard driv e as a file named data.tfb or whatever name you assign as the default filename. While the file is bei ng saved, you should see a brown progre ss bar at the bottom of the screen. When the bar turns white, it indicates that the data has been saved to dis k.

Step 6 To save a current recording for future use, select File > Save As or

click on the tool bar.

You see the standard Save As screen.

Step 7 Give the recording a name and save it to the appropriate directory.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

2.7 External Interface Breakout Board

The External Interface Breakout Board is an accessory that allows standard, LV TTL signals to be connected to the analyzer for triggering. The breakout board consists of two BNC connectors for "EXT IN" and "EXT OUT" signals. The EXT IN connector can be used to import trigger signals from other devices. the EXT OUT connector can be used to export trigger signals to trigger other devices such as oscilloscopes or logic analyzers or to export the external clock for clock calibration using a frequency counter (see Appendix A).

Drive strength for all outputs is about 30mA high (@2V) and 60 mA low (@0.5V). Inputs can handle 0 to 5.5V. Inputs above 2V are detected as logic high; inputs below 0.8V are detected as logic low.

The analyzer connects to the first of three mini DIN ports ("Port 1") on the Breakout Board. Each signaling pin is isolated by a 100Ω series resistor and a buffer inside the Analyzer unit.

Please make sure that the jumpers JP1 and JP2 on the breakout board are set to Position 1.

Mini DIN connectors on the back of the Break-out board.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Connecting the Breakout Board

Merlin II with power supply (left) and Breakout board (right).

The photograph above shows a fully connected Merlin II. The following connections can be seen: Left: Power supply connected to

the power port on the analyzer. Center: Mini DIN cable leading to Port 1 of the breakout board. USB cable leading to an offscreen PC. Right: BNC cable leading from the Breakout board to an offscreen device on the left.

Configuring the Analyzer for the Breakout Board

To configure the analyzer for the breakout board, see section "Save External Interface Signals" on page 68, and section "External Input Signals" on page

88.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

3. Updates

BusEngine and Firmware updates often need to be performed when you update the Merlin II software. These updates can be performed automatically or manually. Both processes are described.

3.1 Update Files

Update files are installed with the Merlin II software during the installation procedure and reside in the local directory of the analyzer application. During the update process, the files are taken from this location.

The following update files are provided with each release:

BusEngine - For updating the hardware logic (has an *.bin extension). Firmware- For updating the platform firmware (has an *.hex extension).

3.2 Automatic Updates

When you update the analyzer software, the software may become incompatible with the BusEngine and Firmware. After the analyzer is powered on, the analyzer will display an error message telling you that it needs to update the Firmware and/or BusEngine. When you click OK, the update process takes place automatically.

To update the BusEngine and/or Firmware, follow these steps:

Step 1 If needed, update the analyzer software, following the steps outlined

in "Software Updates."

Step 2 Turn on the analyzer.

Because the BusEngine and/or the Firmware ar e in compatib le with the current analyzer software version, an error message appears showing your current versions and indicating what versions you need to install.

Step 3 Click Yes.

The update process begins. When the update has finished, a message such as the following

appears and tells you that the update is complete. The example below follows a BusEngine update.

Step 4 Click OK.

Manual Updates

If you prefer, you can manually update the Firmware, and/or BusEngine through the 'Analyzer Setup' dialog. To do this follow these steps:

Step 1 Select from the menu: Setup > Update BE/FW ....

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

The Update Analyzer dialog box opens.

Step 2 Select the one of the entity that you want to update from the list. Step 3 If needed, browse to the application directory to locate the Update

files.

Step 4 Click the Update button.

At this time, the application would start the update process. A progress bar in the dialog would show the progress of the update process.

Please note that in some cases this process can take several minutes to complete.

Step 5 When a the application notifies that the update process is done, you

may need to cycle the analyzer's power to cause the program to take effect, or you may need to unplug and then reconnect the USB cable

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

between the analyzer and the computer to cause the new firmware upgrade to take effect.

3.3 Software, Firmware, and BusEngine Versions

The Readme.html file on the installation CD and on the installed directory on your hard drive. This file gives last-minute updates about the current release. Included with each release are the most recent downloadable images of the Firmware and the BusEngine.

Once the Merlin II has completed the self diagnostics and is connected to the PC, you can check the latest version of the software and BusEngine.

To check information about the current software, select About Merlin II … from the Help menu.

The About Merlin II window appears.

About Merlin II details revisions of the following software and hardware:

• Software Version and Build Number

• Product Name

• Firmware Version

• BusEngine Version

• Unit Serial Number

Note When contacting CATC for technical support, please have available

all the revisions reported in the About Merlin II window.

3.4 Software Updates

When a new software release is available, it is posted on the Support page of the CATC website at

www.catc.com/support.html.

The software is also available on CD from CATC.

Merlin II Protocol Analyzer User’s ManualCATC SW Version 2.50

Updating from CD-ROM

To update the software from CD-ROM, follow these steps:

Step 1 Load the CD-ROM into the CD-ROM drive Step 2 An install screen opens. Step 3 Click Install Software and follow the onscreen instructions.

Updating from the CATC Website

Step 1 Open a web browser and navigate to www.catc.com. Step 2 Find the latest released software version on the CATC website under

Support at the link shown at the top of the page.

If you are running the latest version of the software, no further action is needed.

If you are not running the latest version.

Step 3 Download the software from the CATC website. Step 4 If downloading from the web, unzip the files into your choice of

directory.

Step 5 Click Start, then Run, and browse to where you unzipped the files. Step 6 Select the program named Setup and click Open. Step 7 Click OK to run the Setup and begin the installation. Step 8 Follow the on-screen instructions to complete the installation. Step 9 Read the Readme file for important information on changes in the

release.

3.5 License Information

Licensing information for Merlin II can be viewed by selecting Display Information from the Help menu. The License window provides maintenance expiration and features data for Merlin II.

Updating the Software License

A License key is necessary to enable software maintenance. A license is granted with the purchase of an analyzer. Thereafter, you must

renew your license if you wish to continue receiving support. You obtain a new License Key from CATC. Once the License Key is obtained, follow these steps to install it:

+ 174 hidden pages