Hello everyone! I’m trying to reverse engineer the protocol used for the in the Garmin delta smart BLE shock collar. I have the BLE sniffer from Adafruit that communicates with wireshark. All that is working and I have a few samples of the connection, as well as the packets being transfered over. I’m getting stuck on what I think is either a checksum or a CRC. Can any of you smart people help me crack this riddle?
A sample packet looks as follows:
The first 6 bytes are always constant, as well as the last byte of 0x00.
What i need help with is the 0x29, 0x97, 0xD5.
Here are a few more samples for checking:
Thanks for the help, and let me know if you need any more information.