connect-plus icon indicating copy to clipboard operation
connect-plus copied to clipboard

Support for GATT BR/EDR protocol (Flip 5, 6, Pulse 5, BoomBox 2, BoomBox 3, Charge 5)

Open naveenjohnsonv opened this issue 2 years ago • 25 comments

Trying to connect to my Flip 6 with an Android 13 device using the latest pre-release. Flip is detected by the app but it's stuck at the connecting process. Attached logs and screenshot for reference.

logs

Screenshot

photo_2023-02-01_10-53-38

naveenjohnsonv avatar Feb 01 '23 05:02 naveenjohnsonv

Thanks for the logs! Looks like the Flip 6 is not responding to the request for more information. Most likely, the communication protocol has changed. Unfortunately, that's not something I can debug or fix without having the speaker.

pembem22 avatar Feb 03 '23 08:02 pembem22

Screenshot

Screenshot_2023-02-04-00-44-18-921_me.andreww7985.connectplus.jpg

Hey! Same problem with the Charge 5 speaker (0.8.6.0 frimware version), using the 1.2.0 pre version

logs

VeryBigSad avatar Feb 03 '23 21:02 VeryBigSad

@VeryBigSad looks like you're encountering the infamous "133" Bluetooth error. The error code is meaningless and can appear for absolutely different reasons because phones have different closed-source BT implementations. Try these steps to see if it helps. If the issue still persists, try connecting to other speakers or using other phones to isolate the problem. Please create another issue to continue the discussion.

pembem22 avatar Feb 05 '23 22:02 pembem22

@pembem22 Hey, I have a charge 5, and nRF52840 ble sniffer or I can use esp32 ble sniffer. But I don't know how to sniff the traffic between speaker and app. I tried, but I don't see any helpful info. So if you can guide me how to sniff it, I can spend some time and try to dig it. I'm looking especially to get a battery level. Also I was able to turn on/off the feedback sound based on Protocol specification from discussion.

rakalex avatar Jun 30 '24 06:06 rakalex

@rakalex It's not something I'm familiar with, I've got this far by reverse engineering and debugging the official app. Comparing the connection process between the official app and ConnectPlus (which is failing) would be helpful. I suspect everything should just work with minimal changes once the connection protocol difference is accounted for.

pembem22 avatar Jul 03 '24 21:07 pembem22

@pembem22 Got it, It helped me a lot. I captured the initial communication between app and charge 5. Now I'm able to get the battery level.

Here is the log, that can help you to make the app working for charge 5.

The log
Frame 552: 14 bytes on wire (112 bits), 14 bytes captured (112 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:49.003558000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:49.003558000 UTC
  Epoch Arrival Time: 1720160089.003558000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.030029000 seconds]
  [Time delta from previous displayed frame: 0.000000000 seconds]
  [Time since reference or first frame: 18.659882000 seconds]
  Frame Number: 552
  Frame Length: 14 bytes (112 bits)
  Capture Length: 14 bytes (112 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Sent (0)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Sent (0x00)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 9
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Source Device Name: Nexus 7]
  [Source Role: Master (1)]
  [Destination BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Destination Device Name: JBL Charge 5]
  [Destination Role: Slave (2)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 5
  CID: Dynamically Allocated Channel (0x0048)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Request (0x12)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 0010 = Method: Write Request (0x12)
  Handle: 0x0214 (Unknown)
  Value: 0100

Frame 554: 10 bytes on wire (80 bits), 10 bytes captured (80 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:49.020434000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:49.020434000 UTC
  Epoch Arrival Time: 1720160089.020434000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000671000 seconds]
  [Time delta from previous displayed frame: 0.016876000 seconds]
  [Time since reference or first frame: 18.676758000 seconds]
  Frame Number: 554
  Frame Length: 10 bytes (80 bits)
  Capture Length: 10 bytes (80 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 5
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 1
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Response (0x13)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 0011 = Method: Write Response (0x13)
  [Handle: 0x0214 (Unknown)]
  [Request in Frame: 552]

Frame 585: 16 bytes on wire (128 bits), 16 bytes captured (128 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.611895000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.611895000 UTC
  Epoch Arrival Time: 1720160090.611895000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.126892000 seconds]
  [Time delta from previous displayed frame: 1.591461000 seconds]
  [Time since reference or first frame: 20.268219000 seconds]
  Frame Number: 585
  Frame Length: 16 bytes (128 bits)
  Capture Length: 16 bytes (128 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Sent (0)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Sent (0x00)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 11
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Source Device Name: Nexus 7]
  [Source Role: Master (1)]
  [Destination BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Destination Device Name: JBL Charge 5]
  [Destination Role: Slave (2)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 7
  CID: Dynamically Allocated Channel (0x0048)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Command (0x52)
      0... .... = Authentication Signature: False
      .1.. .... = Command: True
      ..01 0010 = Method: Write Request (0x12)
  Handle: 0x0222 (Unknown)
  Value: aa6c0100

Frame 588: 17 bytes on wire (136 bits), 17 bytes captured (136 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.619067000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.619067000 UTC
  Epoch Arrival Time: 1720160090.619067000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000153000 seconds]
  [Time delta from previous displayed frame: 0.007172000 seconds]
  [Time since reference or first frame: 20.275391000 seconds]
  Frame Number: 588
  Frame Length: 17 bytes (136 bits)
  Capture Length: 17 bytes (136 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..01 .... .... .... = PB Flag: Continuing Fragment (1)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 12
  [This is a continuation to the PDU in frame: 587]
  Data Fragment
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 24
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  [Expert Info (Warning/Protocol): Packet size exceed current ATT_MTU]
      [Packet size exceed current ATT_MTU]
      [Severity level: Warning]
      [Group: Protocol]
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa6d1202c10103010002000300c103010202000301

Frame 589: 15 bytes on wire (120 bits), 15 bytes captured (120 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.625689000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.625689000 UTC
  Epoch Arrival Time: 1720160090.625689000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.006622000 seconds]
  [Time delta from previous displayed frame: 0.006622000 seconds]
  [Time since reference or first frame: 20.282013000 seconds]
  Frame Number: 589
  Frame Length: 15 bytes (120 bits)
  Capture Length: 15 bytes (120 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Sent (0)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Sent (0x00)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 10
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Source Device Name: Nexus 7]
  [Source Role: Master (1)]
  [Destination BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Destination Device Name: JBL Charge 5]
  [Destination Role: Slave (2)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 6
  CID: Dynamically Allocated Channel (0x0048)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Command (0x52)
      0... .... = Authentication Signature: False
      .1.. .... = Command: True
      ..01 0010 = Method: Write Request (0x12)
  Handle: 0x0222 (Unknown)
  Value: aa6500

Frame 591: 16 bytes on wire (128 bits), 16 bytes captured (128 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.630389000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.630389000 UTC
  Epoch Arrival Time: 1720160090.630389000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000641000 seconds]
  [Time delta from previous displayed frame: 0.004700000 seconds]
  [Time since reference or first frame: 20.286713000 seconds]
  Frame Number: 591
  Frame Length: 16 bytes (128 bits)
  Capture Length: 16 bytes (128 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 11
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 7
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa660100

Frame 592: 15 bytes on wire (120 bits), 15 bytes captured (120 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.635272000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.635272000 UTC
  Epoch Arrival Time: 1720160090.635272000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.004883000 seconds]
  [Time delta from previous displayed frame: 0.004883000 seconds]
  [Time since reference or first frame: 20.291596000 seconds]
  Frame Number: 592
  Frame Length: 15 bytes (120 bits)
  Capture Length: 15 bytes (120 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Sent (0)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Sent (0x00)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 10
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Source Device Name: Nexus 7]
  [Source Role: Master (1)]
  [Destination BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Destination Device Name: JBL Charge 5]
  [Destination Role: Slave (2)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 6
  CID: Dynamically Allocated Channel (0x0048)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Command (0x52)
      0... .... = Authentication Signature: False
      .1.. .... = Command: True
      ..01 0010 = Method: Write Request (0x12)
  Handle: 0x0222 (Unknown)
  Value: aa1100

Frame 596: 14 bytes on wire (112 bits), 14 bytes captured (112 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.671618000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.671618000 UTC
  Epoch Arrival Time: 1720160090.671618000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000885000 seconds]
  [Time delta from previous displayed frame: 0.036346000 seconds]
  [Time since reference or first frame: 20.327942000 seconds]
  Frame Number: 596
  Frame Length: 14 bytes (112 bits)
  Capture Length: 14 bytes (112 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..01 .... .... .... = PB Flag: Continuing Fragment (1)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 9
  [This is a continuation to the PDU in frame: 595]
  Data Fragment
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 21
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa120f00c10c4a424c204368617267652035

Frame 597: 19 bytes on wire (152 bits), 19 bytes captured (152 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.672808000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.672808000 UTC
  Epoch Arrival Time: 1720160090.672808000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.001190000 seconds]
  [Time delta from previous displayed frame: 0.001190000 seconds]
  [Time since reference or first frame: 20.329132000 seconds]
  Frame Number: 597
  Frame Length: 19 bytes (152 bits)
  Capture Length: 19 bytes (152 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 14
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 10
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa120400422040

Frame 598: 18 bytes on wire (144 bits), 18 bytes captured (144 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.700427000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.700427000 UTC
  Epoch Arrival Time: 1720160090.700427000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.027619000 seconds]
  [Time delta from previous displayed frame: 0.027619000 seconds]
  [Time since reference or first frame: 20.356751000 seconds]
  Frame Number: 598
  Frame Length: 18 bytes (144 bits)
  Capture Length: 18 bytes (144 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 13
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 9
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa1203004301

Frame 599: 18 bytes on wire (144 bits), 18 bytes captured (144 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.701587000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.701587000 UTC
  Epoch Arrival Time: 1720160090.701587000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.001160000 seconds]
  [Time delta from previous displayed frame: 0.001160000 seconds]
  [Time since reference or first frame: 20.357911000 seconds]
  Frame Number: 599
  Frame Length: 18 bytes (144 bits)
  Capture Length: 18 bytes (144 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 13
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 9
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa120300443c

Frame 600: 18 bytes on wire (144 bits), 18 bytes captured (144 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.702929000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.702929000 UTC
  Epoch Arrival Time: 1720160090.702929000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.001342000 seconds]
  [Time delta from previous displayed frame: 0.001342000 seconds]
  [Time since reference or first frame: 20.359253000 seconds]
  Frame Number: 600
  Frame Length: 18 bytes (144 bits)
  Capture Length: 18 bytes (144 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 13
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 9
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa1203004601

Frame 601: 18 bytes on wire (144 bits), 18 bytes captured (144 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.704058000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.704058000 UTC
  Epoch Arrival Time: 1720160090.704058000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.001129000 seconds]
  [Time delta from previous displayed frame: 0.001129000 seconds]
  [Time since reference or first frame: 20.360382000 seconds]
  Frame Number: 601
  Frame Length: 18 bytes (144 bits)
  Capture Length: 18 bytes (144 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 13
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 9
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa1203004700

Frame 603: 7 bytes on wire (56 bits), 7 bytes captured (56 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.737964000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.737964000 UTC
  Epoch Arrival Time: 1720160090.737964000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.006287000 seconds]
  [Time delta from previous displayed frame: 0.033906000 seconds]
  [Time since reference or first frame: 20.394288000 seconds]
  Frame Number: 603
  Frame Length: 7 bytes (56 bits)
  Capture Length: 7 bytes (56 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..01 .... .... .... = PB Flag: Continuing Fragment (1)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 2
  [This is a continuation to the PDU in frame: 602]
  Data Fragment
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 14
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa12080048f85c7dee8b4e

Frame 605: 19 bytes on wire (152 bits), 19 bytes captured (152 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.738299000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.738299000 UTC
  Epoch Arrival Time: 1720160090.738299000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000122000 seconds]
  [Time delta from previous displayed frame: 0.000335000 seconds]
  [Time since reference or first frame: 20.394623000 seconds]
  Frame Number: 605
  Frame Length: 19 bytes (152 bits)
  Capture Length: 19 bytes (152 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 14
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 10
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa1204004a5b28

Frame 607: 15 bytes on wire (120 bits), 15 bytes captured (120 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.743274000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.743274000 UTC
  Epoch Arrival Time: 1720160090.743274000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.004853000 seconds]
  [Time delta from previous displayed frame: 0.004975000 seconds]
  [Time since reference or first frame: 20.399598000 seconds]
  Frame Number: 607
  Frame Length: 15 bytes (120 bits)
  Capture Length: 15 bytes (120 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Sent (0)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Sent (0x00)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 10
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Source Device Name: Nexus 7]
  [Source Role: Master (1)]
  [Destination BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Destination Device Name: JBL Charge 5]
  [Destination Role: Slave (2)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 6
  CID: Dynamically Allocated Channel (0x0048)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Command (0x52)
      0... .... = Authentication Signature: False
      .1.. .... = Command: True
      ..01 0010 = Method: Write Request (0x12)
  Handle: 0x0222 (Unknown)
  Value: aa4100

Frame 609: 19 bytes on wire (152 bits), 19 bytes captured (152 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.772845000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.772845000 UTC
  Epoch Arrival Time: 1720160090.772845000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000580000 seconds]
  [Time delta from previous displayed frame: 0.029571000 seconds]
  [Time since reference or first frame: 20.429169000 seconds]
  Frame Number: 609
  Frame Length: 19 bytes (152 bits)
  Capture Length: 19 bytes (152 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 14
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 10
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa420400080806

Frame 616: 15 bytes on wire (120 bits), 15 bytes captured (120 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:50.981433000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:50.981433000 UTC
  Epoch Arrival Time: 1720160090.981433000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.081787000 seconds]
  [Time delta from previous displayed frame: 0.208588000 seconds]
  [Time since reference or first frame: 20.637757000 seconds]
  Frame Number: 616
  Frame Length: 15 bytes (120 bits)
  Capture Length: 15 bytes (120 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Sent (0)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Sent (0x00)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 10
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Source Device Name: Nexus 7]
  [Source Role: Master (1)]
  [Destination BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Destination Device Name: JBL Charge 5]
  [Destination Role: Slave (2)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 6
  CID: Dynamically Allocated Channel (0x0048)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Command (0x52)
      0... .... = Authentication Signature: False
      .1.. .... = Command: True
      ..01 0010 = Method: Write Request (0x12)
  Handle: 0x0222 (Unknown)
  Value: aa8100

Frame 620: 21 bytes on wire (168 bits), 21 bytes captured (168 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:51.008960000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:51.008960000 UTC
  Epoch Arrival Time: 1720160091.008960000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000214000 seconds]
  [Time delta from previous displayed frame: 0.027527000 seconds]
  [Time since reference or first frame: 20.665284000 seconds]
  Frame Number: 620
  Frame Length: 21 bytes (168 bits)
  Capture Length: 21 bytes (168 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..01 .... .... .... = PB Flag: Continuing Fragment (1)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 16
  [This is a continuation to the PDU in frame: 618]
  Data Fragment
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 44
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  [Expert Info (Warning/Protocol): Packet size exceed current ATT_MTU]
      [Packet size exceed current ATT_MTU]
      [Severity level: Warning]
      [Group: Protocol]
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa82260000000000010000000500050000000100060000000000000000000000000000000000000000

Frame 623: 17 bytes on wire (136 bits), 17 bytes captured (136 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:51.013537000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:51.013537000 UTC
  Epoch Arrival Time: 1720160091.013537000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000519000 seconds]
  [Time delta from previous displayed frame: 0.004577000 seconds]
  [Time since reference or first frame: 20.669861000 seconds]
  Frame Number: 623
  Frame Length: 17 bytes (136 bits)
  Capture Length: 17 bytes (136 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Sent (0)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Sent (0x00)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 12
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Source Device Name: Nexus 7]
  [Source Role: Master (1)]
  [Destination BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Destination Device Name: JBL Charge 5]
  [Destination Role: Slave (2)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 8
  CID: Dynamically Allocated Channel (0x0048)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Command (0x52)
      0... .... = Authentication Signature: False
      .1.. .... = Command: True
      ..01 0010 = Method: Write Request (0x12)
  Handle: 0x0222 (Unknown)
  Value: aa01028200

Frame 646: 15 bytes on wire (120 bits), 15 bytes captured (120 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:51.640521000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:51.640521000 UTC
  Epoch Arrival Time: 1720160091.640521000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.059509000 seconds]
  [Time delta from previous displayed frame: 0.626984000 seconds]
  [Time since reference or first frame: 21.296845000 seconds]
  Frame Number: 646
  Frame Length: 15 bytes (120 bits)
  Capture Length: 15 bytes (120 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Sent (0)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Sent (0x00)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 10
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Source Device Name: Nexus 7]
  [Source Role: Master (1)]
  [Destination BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Destination Device Name: JBL Charge 5]
  [Destination Role: Slave (2)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 6
  CID: Dynamically Allocated Channel (0x0048)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Command (0x52)
      0... .... = Authentication Signature: False
      .1.. .... = Command: True
      ..01 0010 = Method: Write Request (0x12)
  Handle: 0x0222 (Unknown)
  Value: aa1700

Frame 648: 16 bytes on wire (128 bits), 16 bytes captured (128 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:51.645556000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:51.645556000 UTC
  Epoch Arrival Time: 1720160091.645556000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000183000 seconds]
  [Time delta from previous displayed frame: 0.005035000 seconds]
  [Time since reference or first frame: 21.301880000 seconds]
  Frame Number: 648
  Frame Length: 16 bytes (128 bits)
  Capture Length: 16 bytes (128 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 11
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 7
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aa160100

Frame 649: 15 bytes on wire (120 bits), 15 bytes captured (120 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:51.653949000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:51.653949000 UTC
  Epoch Arrival Time: 1720160091.653949000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.008393000 seconds]
  [Time delta from previous displayed frame: 0.008393000 seconds]
  [Time since reference or first frame: 21.310273000 seconds]
  Frame Number: 649
  Frame Length: 15 bytes (120 bits)
  Capture Length: 15 bytes (120 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Sent (0)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Sent (0x00)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..00 .... .... .... = PB Flag: First Non-automatically Flushable Packet (0)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 10
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Source Device Name: Nexus 7]
  [Source Role: Master (1)]
  [Destination BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Destination Device Name: JBL Charge 5]
  [Destination Role: Slave (2)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 6
  CID: Dynamically Allocated Channel (0x0048)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Write Command (0x52)
      0... .... = Authentication Signature: False
      .1.. .... = Command: True
      ..01 0010 = Method: Write Request (0x12)
  Handle: 0x0222 (Unknown)
  Value: aa7a00

Frame 651: 17 bytes on wire (136 bits), 17 bytes captured (136 bits)
  Encapsulation type: Bluetooth H4 with linux header (99)
  Arrival Time: Jul  5, 2024 09:14:51.682910000 EEST
  UTC Arrival Time: Jul  5, 2024 06:14:51.682910000 UTC
  Epoch Arrival Time: 1720160091.682910000
  [Time shift for this packet: 0.000000000 seconds]
  [Time delta from previous captured frame: 0.000611000 seconds]
  [Time delta from previous displayed frame: 0.028961000 seconds]
  [Time since reference or first frame: 21.339234000 seconds]
  Frame Number: 651
  Frame Length: 17 bytes (136 bits)
  Capture Length: 17 bytes (136 bits)
  [Frame is marked: False]
  [Frame is ignored: False]
  Point-to-Point Direction: Received (1)
  [Protocols in frame: bluetooth:hci_h4:bthci_acl:btl2cap:btatt]
Bluetooth
Bluetooth HCI H4
  [Direction: Rcvd (0x01)]
  HCI Packet Type: ACL Data (0x02)
Bluetooth HCI ACL Packet
  .... 0000 0000 0010 = Connection Handle: 0x002
  ..10 .... .... .... = PB Flag: First Automatically Flushable Packet (2)
  00.. .... .... .... = BC Flag: Point-To-Point (0)
  Data Total Length: 12
  Data
  [Connect in frame: 143]
  [Source BD_ADDR: HonestyElect_ee:8b:4e (f8:5c:7d:ee:8b:4e)]
  [Source Device Name: JBL Charge 5]
  [Source Role: Slave (2)]
  [Destination BD_ADDR: ASUSTekCOMPU_3d:14:23 (ac:22:0b:3d:14:23)]
  [Destination Device Name: Nexus 7]
  [Destination Role: Master (1)]
  [Last Role Change in Frame: 138]
  [Current Mode: Active Mode (0)]
  [Last Mode Change in Frame: 524]
Bluetooth L2CAP Protocol
  Length: 8
  CID: Dynamically Allocated Channel (0x0047)
  [Connect in frame: 519]
  [PSM: ATT (0x001f)]
Bluetooth Attribute Protocol
  Opcode: Handle Value Notification (0x1b)
      0... .... = Authentication Signature: False
      .0.. .... = Command: False
      ..01 1011 = Method: Handle Value Notification (0x1b)
  Handle: 0x0212 (Unknown)
  Value: aaee017a00  

rakalex avatar Jul 06 '24 06:07 rakalex

Charge 5 stock at connecting, using Android 14 HyperOs

Log
--------- beginning of main
07-31 14:57:39.670 10556 10556 I 985.connectplus: Using CollectorTypeCC GC.
07-31 14:57:39.674 10556 10556 E 985.connectplus: Not starting debugger since process cannot load the jdwp agent.
07-31 14:57:39.680 10556 10556 I MessageMonitor: Load libmiui_runtime
07-31 14:57:39.721 10556 10556 D CompatibilityChangeReporter: Compat change id reported: 171979766; UID 10392; state: ENABLED
07-31 14:57:39.721 10556 10556 D CompatibilityChangeReporter: Compat change id reported: 242716250; UID 10392; state: ENABLED
07-31 14:57:39.734 10556 22531 D AppScoutStateMachine: 10556-ScoutStateMachinecreated
07-31 14:57:39.739 10556 10556 D nativeloader: Configuring clns-4 for other apk /data/app/~~_nGbkcv4lSmrJFqGqni06A==/me.andreww7985.connectplus-xJBwQ-QEzjZByWoy_wklOw==/base.apk. target_sdk_version=34, uses_libraries=, library_path=/data/app/~~_nGbkcv4lSmrJFqGqni06A==/me.andreww7985.connectplus-xJBwQ-QEzjZByWoy_wklOw==/lib/arm64, permitted_path=/data:/mnt/expand:/data/user/0/me.andreww7985.connectplus
07-31 14:57:39.746 10556 10556 I Perf    : Connecting to perf service.
07-31 14:57:39.757 10556 10556 V GraphicsEnvironment: Currently set values for:
07-31 14:57:39.757 10556 10556 V GraphicsEnvironment:   angle_gl_driver_selection_pkgs=[]
07-31 14:57:39.757 10556 10556 V GraphicsEnvironment:   angle_gl_driver_selection_values=[]
07-31 14:57:39.757 10556 10556 V GraphicsEnvironment: ANGLE GameManagerService for me.andreww7985.connectplus: false
07-31 14:57:39.757 10556 10556 V GraphicsEnvironment: me.andreww7985.connectplus is not listed in per-application setting
07-31 14:57:39.758 10556 10556 V GraphicsEnvironment: App is not on the allowlist for updatable production driver.
07-31 14:57:39.765 10556 10556 I ForceDarkHelperStubImpl: initialize for me.andreww7985.connectplus , ForceDarkAppConfig: null
07-31 14:57:39.766 10556 10556 D OpenGLRenderer: JNI_OnLoad success
07-31 14:57:39.767 10556 10556 I MiuiForceDarkConfig: setConfig density:2.900000, mainRule:0, secondaryRule:0, tertiaryRule:0
07-31 14:57:39.771 10556 10556 D CompatibilityChangeReporter: Compat change id reported: 183155436; UID 10392; state: ENABLED
07-31 14:57:39.771 10556 10556 W 985.connectplus: Accessing hidden field Ljava/util/Collections$SynchronizedCollection;->mutex:Ljava/lang/Object; (max-target-o, reflection, denied)
07-31 14:57:39.771 10556 10556 W 985.connectplus: Accessing hidden method Ljava/util/Collections$SynchronizedSet;-><init>(Ljava/util/Set;Ljava/lang/Object;)V (max-target-o, reflection, denied)
07-31 14:57:39.772 10556 10556 W 985.connectplus: Accessing hidden method Ljava/util/Collections$SynchronizedCollection;-><init>(Ljava/util/Collection;Ljava/lang/Object;)V (max-target-o, reflection, denied)
07-31 14:57:39.772 10556 10556 D SessionsDependencies: Dependency to CRASHLYTICS added.
07-31 14:57:39.773 10556 10556 I FirebaseApp: Device unlocked: initializing all Firebase APIs for app [DEFAULT]
07-31 14:57:39.773 10556 10556 I FirebaseCrashlytics: Initializing Firebase Crashlytics 18.6.2 for me.andreww7985.connectplus
07-31 14:57:39.794 10556 10556 D SessionsDependencies: Subscriber CRASHLYTICS registered.
07-31 14:57:39.808 10556 22553 I DynamiteModule: Considering local module com.google.android.gms.measurement.dynamite:100 and remote module com.google.android.gms.measurement.dynamite:119
07-31 14:57:39.808 10556 22553 I DynamiteModule: Selected remote version of com.google.android.gms.measurement.dynamite, version >= 119
07-31 14:57:39.808 10556 22553 V DynamiteModule: Dynamite loader version >= 2, using loadModule2NoCrashUtils
07-31 14:57:39.817 10556 22553 W System  : ClassLoader referenced unknown path: 
07-31 14:57:39.818 10556 22553 D nativeloader: Configuring clns-5 for other apk . target_sdk_version=34, uses_libraries=, library_path=/data/app/~~3OGwHH7tiuBfDmqwIACf-A==/com.google.android.gms-b-vBa7hKJRJphOZb6O_D9w==/lib/arm64:/data/app/~~3OGwHH7tiuBfDmqwIACf-A==/com.google.android.gms-b-vBa7hKJRJphOZb6O_D9w==/base.apk!/lib/arm64-v8a, permitted_path=/data:/mnt/expand:/data/user/0/com.google.android.gms
07-31 14:57:39.823 10556 10556 D FirebaseSessions: Initializing Firebase Sessions SDK.
07-31 14:57:39.824 10556 10556 I FirebaseInitProvider: FirebaseApp initialization successful
07-31 14:57:39.824 10556 22578 D LifecycleServiceBinder: Binding service to application.
07-31 14:57:39.827 10556 22555 I FirebaseCrashlytics: No version control information found
07-31 14:57:39.829 10556 22553 W 985.connectplus: ClassLoaderContext classpath size mismatch. expected=12, found=2 (DLC[];PCL[base.apk*3183773654:base.apk!classes2.dex*2062039298:base.apk!classes3.dex*4062577707:base.apk!classes4.dex*3102703820:base.apk!classes5.dex*3172952303:base.apk!classes6.dex*703070101:base.apk!classes7.dex*1002173178:base.apk!classes8.dex*2043743829:base.apk!classes9.dex*4119085366:base.apk!classes10.dex*3374543485:base.apk!classes11.dex*3671210191:base.apk!classes12.dex*4287932251]{PCL[/system/framework/org.apache.http.legacy.jar*2865211570]#PCL[/system/framework/com.android.media.remotedisplay.jar*2114713713]#PCL[/system/framework/com.android.location.provider.jar*3994156536]#PCL[/system/framework/org.apache.http.legacy.jar*2865211570]} | DLC[];PCL[/data/app/~~_nGbkcv4lSmrJFqGqni06A==/me.andreww7985.connectplus-xJBwQ-QEzjZByWoy_wklOw==/base.apk*1253857385:/data/app/~~_nGbkcv4lSmrJFqGqni06A==/me.andreww7985.connectplus-xJBwQ-QEzjZByWoy_wklOw==/base.apk!classes2.dex*4154481287])
07-31 14:57:39.839 10556 22586 W ziparchive: Unable to open '/system/framework/QXPerformance.dm': No such file or directory
07-31 14:57:39.839 10556 22586 W ziparchive: Unable to open '/system/framework/QXPerformance.dm': No such file or directory
07-31 14:57:39.849 10556 10556 D App     : sendUsageData true
07-31 14:57:39.863 10556 10556 D AppCompatDelegate: Checking for metadata for AppLocalesMetadataHolderService : Service not found
07-31 14:57:39.873 10556 22599 W libc    : Access denied finding property "vendor.migl.debug"
07-31 14:57:39.873 10556 22599 I libMiGL : EnableDR: 0
07-31 14:57:39.873 10556 22599 D libMiGL : mDFIInterval: -1
07-31 14:57:39.876 10556 10556 D DecorView[]: getWindowModeFromSystem  windowmode is 1
07-31 14:57:39.885 10556 10556 W libc    : Access denied finding property "ro.vendor.df.effect.conflict"
07-31 14:57:39.883 10556 10556 W 985.connectplus: type=1400 audit(0.0:270157): avc:  denied  { read } for  name="u:object_r:vendor_displayfeature_prop:s0" dev="tmpfs" ino=13243 scontext=u:r:untrusted_app:s0:c136,c257,c512,c768 tcontext=u:object_r:vendor_displayfeature_prop:s0 tclass=file permissive=0 app=me.andreww7985.connectplus
07-31 14:57:39.890 10556 10556 D CompatibilityChangeReporter: Compat change id reported: 210923482; UID 10392; state: ENABLED
07-31 14:57:39.903 10556 22578 D SessionLifecycleClient: Queued message 1. Queue size 1
07-31 14:57:39.906 10556 10556 D CompatibilityChangeReporter: Compat change id reported: 263076149; UID 10392; state: ENABLED
07-31 14:57:39.912 10556 10556 D DiscoveryView: checkPermissions
07-31 14:57:39.912 10556 10556 D DiscoveryView: checkBluetooth
07-31 14:57:39.912 10556 10556 D BluetoothAdapter: isLeEnabled(): ON
07-31 14:57:39.916 10556 22608 E 985.connectplus: No package ID 78 found for resource ID 0x780b0007.
07-31 14:57:39.917 10556 22608 E 985.connectplus: No package ID 78 found for resource ID 0x780b0007.
07-31 14:57:39.919 10556 22608 I FA      : App measurement initialized, version: 99007
07-31 14:57:39.919 10556 22608 I FA      : To enable debug logging run: adb shell setprop log.tag.FA VERBOSE
07-31 14:57:39.919 10556 22608 I FA      : To enable faster debug mode event logging run:
07-31 14:57:39.919 10556 22608 I FA      :   adb shell setprop debug.firebase.analytics.app me.andreww7985.connectplus
07-31 14:57:39.920 10556 22531 D BluetoothLeScanner: onScannerRegistered() - status=0 scannerId=14 mScannerId=0
07-31 14:57:39.940 10556 10556 D CompatibilityChangeReporter: Compat change id reported: 237531167; UID 10392; state: DISABLED
--------- beginning of system
07-31 14:57:39.945 10556 10556 D FramePredict: FramePredict init: false
07-31 14:57:39.946 10556 10556 D FramePredict: init success
07-31 14:57:39.952 10556 22614 E FramePredict: registerContentObserver fail
07-31 14:57:39.955 10556 10556 I ForceDarkHelperStubImpl: setViewRootImplForceDark: false for me.andreww7985.connectplus.discovery.DiscoveryView@45f98a5, reason: DarkModeEnabled
07-31 14:57:40.027 10556 10556 W 985.connectplus: type=1400 audit(0.0:270158): avc:  denied  { read } for  name="u:object_r:vendor_display_prop:s0" dev="tmpfs" ino=13242 scontext=u:r:untrusted_app:s0:c136,c257,c512,c768 tcontext=u:object_r:vendor_display_prop:s0 tclass=file permissive=0 app=me.andreww7985.connectplus
07-31 14:57:40.035 10556 22595 I AdrenoGLES-0: QUALCOMM build                   : 329cf4c2a7, I63533b1e29
07-31 14:57:40.035 10556 22595 I AdrenoGLES-0: Build Date                       : 01/31/23
07-31 14:57:40.035 10556 22595 I AdrenoGLES-0: OpenGL ES Shader Compiler Version: EV031.35.01.12
07-31 14:57:40.035 10556 22595 I AdrenoGLES-0: Local Branch                     : 
07-31 14:57:40.035 10556 22595 I AdrenoGLES-0: Remote Branch                    : refs/tags/AU_LINUX_ANDROID_LA.UM.9.14.11.00.00.571.148
07-31 14:57:40.035 10556 22595 I AdrenoGLES-0: Remote Branch                    : NONE
07-31 14:57:40.035 10556 22595 I AdrenoGLES-0: Reconstruct Branch               : NOTHING
07-31 14:57:40.035 10556 22595 I AdrenoGLES-0: Build Config                     : S P 10.0.7 AArch64
07-31 14:57:40.035 10556 22595 I AdrenoGLES-0: Driver Path                      : /vendor/lib64/egl/libGLESv2_adreno.so
07-31 14:57:40.043 10556 22595 I AdrenoGLES-0: PFP: 0x016dc094, ME: 0x00000000
07-31 14:57:40.044 10556 22608 I FA      : Tag Manager is not found and thus will not be used
07-31 14:57:40.060 10556 10556 D VRI[DiscoveryView]: vri.reportNextDraw android.view.ViewRootImpl.performTraversals:4360 android.view.ViewRootImpl.doTraversal:2989 android.view.ViewRootImpl$TraversalRunnable.run:10304 android.view.Choreographer$CallbackRecord.run:1594 android.view.Choreographer$CallbackRecord.run:1603 
07-31 14:57:40.061 10556 10556 D VRI[DiscoveryView]: vri.Setup new sync=wmsSync-VRI[DiscoveryView]#0
07-31 14:57:40.086 10556 22595 E OpenGLRenderer: Unable to match the desired swap behavior.
07-31 14:57:40.092 10556 22595 D OpenGLRenderer: makeCurrent grContext:0xb400007b7ae4ea80 reset mTextureAvailable
07-31 14:57:40.096 10556 22595 D 985.connectplus: MiuiProcessManagerServiceStub setSchedFifo
07-31 14:57:40.096 10556 22595 I MiuiProcessManagerImpl: setSchedFifo pid:10556, mode:3
07-31 14:57:40.132 10556 22595 E LB      : fail to open node: No such file or directory
07-31 14:57:40.135 10556 10556 D VRI[DiscoveryView]: vri.reportDrawFinished
07-31 14:57:40.150 10556 10556 D SessionLifecycleService: Service bound to new client on process 10556
07-31 14:57:40.154 10556 22620 D SessionLifecycleService: App has not yet foregrounded. Using previously stored session: null
07-31 14:57:40.154 10556 22620 D SessionLifecycleService: Client android.os.Messenger@a43247c bound at 124953233. Clients: 1
07-31 14:57:40.169 10556 10556 D SessionLifecycleClient: Connected to SessionLifecycleService. Queue size 1
07-31 14:57:40.169 10556 22582 D SessionLifecycleClient: Sending lifecycle 1 to service
07-31 14:57:40.169 10556 22620 D SessionLifecycleService: Activity foregrounding at 124953249.
07-31 14:57:40.169 10556 22620 D SessionLifecycleService: Cold start detected.
07-31 14:57:40.169 10556 10556 I HandWritingStubImpl: refreshLastKeyboardType: 1
07-31 14:57:40.169 10556 10556 I HandWritingStubImpl: getCurrentKeyboardType: 1
07-31 14:57:40.178 10556 22620 D SessionLifecycleService: Generated new session a9b7e5c0241a44948f6d489900e203ad
07-31 14:57:40.178 10556 22620 D SessionLifecycleService: Broadcasting new session: SessionDetails(sessionId=a9b7e5c0241a44948f6d489900e203ad, firstSessionId=a9b7e5c0241a44948f6d489900e203ad, sessionIndex=0, sessionStartTimestampUs=1722434260178000)
07-31 14:57:40.178 10556 22578 D SessionFirelogPublisher: Data Collection is enabled for at least one Subscriber
07-31 14:57:40.191 10556 10556 D SessionLifecycleClient: Session update received: a9b7e5c0241a44948f6d489900e203ad
07-31 14:57:40.192 10556 22578 D SessionLifecycleClient: Notified CRASHLYTICS of new session a9b7e5c0241a44948f6d489900e203ad
07-31 14:57:40.192 10556 22582 D EventGDTLogger: Session Event: {"eventType":1,"sessionData":{"sessionId":"a9b7e5c0241a44948f6d489900e203ad","firstSessionId":"a9b7e5c0241a44948f6d489900e203ad","sessionIndex":0,"eventTimestampUs":1722434260178000,"dataCollectionStatus":{"performance":1,"crashlytics":2,"sessionSamplingRate":1.0},"firebaseInstallationId":"eZlIXahqQDGWqYquglrnWr"},"applicationInfo":{"appId":"1:263610433962:android:f3267dab3baf69c4","deviceModel":"2107113SG","sessionSdkVersion":"1.2.1","osVersion":"14","logEnvironment":3,"androidAppInfo":{"packageName":"me.andreww7985.connectplus","versionName":"1.2.1-release","appBuildVersion":"10210","deviceManufacturer":"Xiaomi","currentProcessDetails":{"processName":"me.andreww7985.connectplus","pid":10556,"importance":100,"defaultProcess":true},"appProcessDetails":[{"processName":"me.andreww7985.connectplus","pid":10556,"importance":100,"defaultProcess":true}]}}}
07-31 14:57:40.193 10556 22582 D SessionFirelogPublisher: Successfully logged Session Start event: a9b7e5c0241a44948f6d489900e203ad
07-31 14:57:40.205 10556 22595 W RenderInspector: DequeueBuffer time out on me.andreww7985.connectplus/me.andreww7985.connectplus.discovery.DiscoveryView, count=1, avg=13 ms, max=13 ms.
07-31 14:57:40.211 10556 10556 I HandWritingStubImpl: getCurrentKeyboardType: 1
07-31 14:57:40.217 10556 22573 D CompatibilityChangeReporter: Compat change id reported: 194532703; UID 10392; state: ENABLED
07-31 14:57:40.217 10556 22573 D CompatibilityChangeReporter: Compat change id reported: 253665015; UID 10392; state: ENABLED
07-31 14:57:40.547 10556 10556 D CompatibilityChangeReporter: Compat change id reported: 247079863; UID 10392; state: ENABLED
07-31 14:57:40.547 10556 10556 D BleScanManager$scanCallback: connect 55:28:74:31:19:E9 JBL Charge 5
07-31 14:57:40.547 10556 10556 D BleScanManager$scanCallback: connect parsed 402001385EDA62890316
07-31 14:57:40.548 10556 10556 D BleConnection: connect
07-31 14:57:40.548 10556 10556 D CompatibilityChangeReporter: Compat change id reported: 265103382; UID 10392; state: ENABLED
07-31 14:57:40.549 10556 10556 D BluetoothGatt: connect() - device: 55:28:74:31:19:E9, auto: false, eattSupport: false
07-31 14:57:40.549 10556 10556 D BluetoothGatt: registerApp()
07-31 14:57:40.549 10556 10556 D BluetoothGatt: registerApp() - UUID=f7718cfd-c933-4c93-a8e4-0656a8fd1749
07-31 14:57:40.552 10556 10556 D SpeakerManager: speakerFound MAC = 55:28:74:31:19:E9
07-31 14:57:40.552 10556 22610 D BluetoothGatt: onClientRegistered() - status=0 clientIf=15
07-31 14:57:40.552 10556 10556 D SpeakerManager: speakerFound found main speaker
07-31 14:57:40.553 10556 10556 D BluetoothAdapter: isLeEnabled(): ON
07-31 14:57:40.557 10556 10556 D Event   : Firing event me.andreww7985.connectplus.Event@7d5dd36, listeners: [interface a6.a]
07-31 14:57:40.562 10556 10556 D BleScanManager$scanCallback: connect 55:28:74:31:19:E9 JBL Charge 5
07-31 14:57:41.711 10556 22531 D BluetoothGatt: onClientConnectionState() - status=0 clientIf=15 device=55:28:74:31:19:E9
07-31 14:57:41.711 10556 22531 D BleConnection$gattCallback: onConnectionStateChange status = 0, newState = 2
07-31 14:57:41.712 10556 22531 D BleOperationManager: request operation RequestMtuOperation
07-31 14:57:41.712 10556 22531 D BluetoothGatt: configureMTU() - device: 55:28:74:31:19:E9 mtu: 35
07-31 14:57:42.305 10556 22531 D BluetoothGatt: onConnectionUpdated() - Device=55:28:74:31:19:E9 interval=48 latency=0 timeout=500 status=0
07-31 14:57:42.900 10556 22531 D BluetoothGatt: onConnectionUpdated() - Device=55:28:74:31:19:E9 interval=6 latency=0 timeout=500 status=0
07-31 14:57:43.121 10556 22531 D BluetoothGatt: onConfigureMTU() - Device=55:28:74:31:19:E9 mtu=110 status=0
07-31 14:57:43.122 10556 22531 D BleOperationManager: operationComplete
07-31 14:57:43.122 10556 22531 D BleOperationManager: request operation DiscoverOperation
07-31 14:57:43.122 10556 22531 D BluetoothGatt: discoverServices() - device: 55:28:74:31:19:E9
07-31 14:57:43.133 10556 22531 D BluetoothGatt: onSearchComplete() = Device=55:28:74:31:19:E9 Status=0
07-31 14:57:43.133 10556 22531 D BleOperationManager: operationComplete
07-31 14:57:43.133 10556 22531 D BleOperationManager: request operation EnableNotificationOperation
07-31 14:57:43.133 10556 22531 D BluetoothGatt: setCharacteristicNotification() - uuid: 65786365-6c70-6f69-6e74-2e636f6d0001 enable: true
07-31 14:57:43.138 10556 22531 D BleOperationManager: operationComplete
07-31 14:57:43.138 10556 22531 D SpeakerModel: 55:28:74:31:19:E9 sendPacket REQ_SPEAKER_INFO 
07-31 14:57:43.138 10556 22531 D BleOperationManager: request operation WriteCharacteristicOperation
07-31 14:57:43.138 10556 22531 D WriteCharacteristicOperation: writeCharacteristic
07-31 14:57:43.142 10556 22531 D BleConnection$gattCallback: onCharacteristicWrite
07-31 14:57:43.142 10556 22531 D BleOperationManager: operationComplete
07-31 14:57:43.200 10556 22531 D BluetoothGatt: onConnectionUpdated() - Device=55:28:74:31:19:E9 interval=48 latency=0 timeout=500 status=0
07-31 14:57:45.737 10556 22910 D ProfileInstaller: Installing profile for me.andreww7985.connectplus
07-31 14:57:46.360 10556 10556 D BluetoothAdapter: isLeEnabled(): ON
07-31 14:57:46.360 10556 10556 D BluetoothLeScanner: could not find callback wrapper
07-31 14:57:46.361 10556 22578 D SessionLifecycleClient: Sending lifecycle 2 to service
07-31 14:57:46.362 10556 22620 D SessionLifecycleService: Activity backgrounding at 124959442
07-31 14:57:48.409 10556 22608 I FA      : Application backgrounded at: timestamp_millis: 1722434266407
07-31 14:58:17.508 10556 22525 I 985.connectplus: Background concurrent copying GC freed 273534(12MB) AllocSpace objects, 46(1240KB) LOS objects, 75% free, 3809KB/14MB, paused 194us,82us total 150.124ms
07-31 14:58:17.511 10556 10556 W FinalizerDaemon: type=1400 audit(0.0:270175): avc:  denied  { getopt } for  path="/dev/socket/usap_pool_primary" scontext=u:r:untrusted_app:s0:c136,c257,c512,c768 tcontext=u:r:zygote:s0 tclass=unix_stream_socket permissive=0 app=me.andreww7985.connectplus
07-31 14:58:21.944 10556 22573 I TRuntime.CctTransportBackend: Making request to: https://firebaselogging-pa.googleapis.com/v1/firelog/legacy/batchlog
07-31 14:58:21.999 10556 22573 D TrafficStats: tagSocket(3) with statsTag=0xffffffff, statsUid=-1
07-31 14:58:22.306 10556 10556 W JobService: onNetworkChanged() not implemented in com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService. Must override in a subclass.
07-31 14:58:22.648 10556 22573 I TRuntime.CctTransportBackend: Status Code: 200
07-31 14:59:11.285 12408 12408 I 985.connectplus: Using CollectorTypeCC GC.
07-31 14:59:11.300 12408 12408 E 985.connectplus: Not starting debugger since process cannot load the jdwp agent.
07-31 14:59:11.306 12408 12408 I MessageMonitor: Load libmiui_runtime
07-31 14:59:11.510 12408 12408 D CompatibilityChangeReporter: Compat change id reported: 171979766; UID 10392; state: ENABLED
07-31 14:59:11.510 12408 12408 D CompatibilityChangeReporter: Compat change id reported: 242716250; UID 10392; state: ENABLED
07-31 14:59:11.529 12408 12408 I 985.connectplus: Failed to add image file: Failed to find OatDexFile for DexFile /data/app/~~_nGbkcv4lSmrJFqGqni06A==/me.andreww7985.connectplus-xJBwQ-QEzjZByWoy_wklOw==/base.apk (canonical path /data/app/~~_nGbkcv4lSmrJFqGqni06A==/me.andreww7985.connectplus-xJBwQ-QEzjZByWoy_wklOw==/base.apk) in OatFile /data/app/~~XL_e0gXiAdv3t5j2ZrVj6w==/me.andreww7985.connectplus-DVkAOQwMQJ-Ui8MMXGfbLA==/oat/arm64/base.odex
07-31 14:

Kenzy173 avatar Jul 31 '24 14:07 Kenzy173

la ultima version de la app se me conecta con mi bombox 3 pero no me da la occion "Flash DFU" para cambiar el firmware y es lo q mas me interesa ya q mi equipo dejo de funcionar al actualizarlo el ano pasado

Randys0496 avatar Jan 18 '25 02:01 Randys0496

I have an a14 device with root on a custom rom as well as a pc with bluetooth module, is there anything I can do to help, like logs or data spoofing the official jbl app with root? I am interested in the possibility of flashing my jbl charge 5, but the program mpflash tool 3.0 is not available, and via Bluetooth flashing is not possible. also for fun i can connect my jbl charge 5 in dfu mode via usb with com port detection.

Bubyldian avatar Mar 18 '25 11:03 Bubyldian

I have an a14 device with root on a custom rom as well as a pc with bluetooth module, is there anything I can do to help, like logs or data spoofing the official jbl app with root? I am interested in the possibility of flashing my jbl charge 5, but the program mpflash tool 3.0 is not available, and via Bluetooth flashing is not possible. also for fun i can connect my jbl charge 5 in dfu mode via usb with com port detection.

I also have lsposed manager, powerful tool to modify apps without patching

Bubyldian avatar Mar 18 '25 11:03 Bubyldian

Screenshot

image wait... j image

a little attention, a small miracle happened. we are waiting for the developer's response, if he is interested in this at all

Bubyldian avatar Mar 19 '25 16:03 Bubyldian

@pembem22 What could be the reason for the inability to flash speakers with vimicro, the lack of support?

Bubyldian avatar Mar 20 '25 08:03 Bubyldian

@pembem22 What could be the reason for the inability to flash speakers with vimicro, the lack of support?

I disabled it as I assumed the new protocol could potentially also mean there were significant changes to the DFU upload process. I'm curious to know how you managed to get the app connecting, maybe the changes are minimal and flashing will work as well.

pembem22 avatar Mar 20 '25 12:03 pembem22

@pembem22 What could be the reason for the inability to flash speakers with vimicro, the lack of support?

I disabled it as I assumed the new protocol could potentially also mean there were significant changes to the DFU upload process. I'm curious to know how you managed to get the app connecting, maybe the changes are minimal and flashing will work as well.

We were trying to debug the speaker and get some output from serial bluetooth terminal application and after opening jbl plus connect we found that the speaker was successfully detected and connected to your application, although not with all functionality, which did not happen before because of error 133.

As a result, in order to fix error 133 you need to connect the speaker in serial bluetooth terminal application in ble mode and setting the rx tx uuid. Further, if the connection does not happen, to be sure to activate gatt protocol, you need to go to the official application jbl portable and in it connect the speaker, because most likely one of these items initiates connection by gatt, after which connect plus successfully connects to the speaker, as we have here.

link to serial Bluetooth terminal: ttps://play.google.com/store/apps/details/Serial_Bluetooth_Terminal?id=de.kai_morich.serial_bluetooth_terminal&hl=en_NZ

Bubyldian avatar Mar 20 '25 13:03 Bubyldian

What are the RX and TX UUIDs that you used?

pembem22 avatar Mar 20 '25 14:03 pembem22

What are the RX and TX UUIDs that you used?

default, from jbl portable and your app

Screenshot

Screenshot_20250320-150624_Serial_Bluetooth_Terminal.png

Bubyldian avatar Mar 20 '25 14:03 Bubyldian

@pembem22 What could be the reason for the inability to flash speakers with vimicro, the lack of support?

I disabled it as I assumed the new protocol could potentially also mean there were significant changes to the DFU upload process. I'm curious to know how you managed to get the app connecting, maybe the changes are minimal and flashing will work as well.

https://photos.app.goo.gl/dTu3pkGn2vuvcDdK6 Here is the process to fix 133 error, I just need to connect the speaker in serial bluetooth terminal and then it is successfully detected by your application

Bubyldian avatar Mar 20 '25 14:03 Bubyldian

@pembem22 we injected the logger into the official jbl portable application and found out the bytes that need to be sent to the speaker via serial Bluetooth terminal to interact with the speaker equalizer.

AA6E20000 - equalizer enable.

aa6e020100 - disable equalizer

AA 6E 08 C1 03 01 01 01 02 FE 03 FE, AA 6E 08 C1 03 01 02 02 02 FE 03 FE and AA 6E 08 C1 03 01 01 00 02 FE 03 FE: different equalizer band settings

Bubyldian avatar Mar 21 '25 09:03 Bubyldian

@pembem22 we injected the logger into the official jbl portable application and found out the bytes that need to be sent to the speaker via serial Bluetooth terminal to interact with the speaker equalizer.

AA6E20000 - equalizer enable.

aa6e020100 - disable equalizer

AA 6E 08 C1 03 01 01 01 02 FE 03 FE, AA 6E 08 C1 03 01 02 02 02 FE 03 FE and AA 6E 08 C1 03 01 01 00 02 FE 03 FE: different equalizer band settings

Let's move protocol discussion here https://github.com/pembem22/connect-plus/discussions/101

pembem22 avatar Mar 21 '25 11:03 pembem22

@pembem22 we were close, but it hangs up on initialization.

Screenshot

Image

Bubyldian avatar Mar 21 '25 21:03 Bubyldian

@Bubyldian so can you teach me how to flash vimicro speaker like in the screenshot?

v1ntt1 avatar May 08 '25 10:05 v1ntt1

@Bubyldian any process or instructions for downgrading charge 5 from v 0.8.9?

yadekaiser avatar May 18 '25 15:05 yadekaiser

Does this also affect the Xtreme 3?

When I try to use the ConnectPlus with this model, the app will state it is "Connecting to Xtreme 3", but the menu will load and appear - same as when I attempt to connect the app to the Boombox 3.

taivlam avatar Jul 11 '25 18:07 taivlam

Man we really need support for vimicro, my flip 6 updated and im missing the good sounds of the older firmware. Im basically very mad about how dirty JBL does to their own consumers.

Azenny1986 avatar Jul 16 '25 01:07 Azenny1986

@pembem22 here are the logs obtained during the process of updating the flip 6 speaker in the official app, hope you take a look and extract something useful from it

logs+jbl+6.zip

Bubyldian avatar Jul 27 '25 09:07 Bubyldian