Control ESP32 with BT Remote - Subscribe to Characteristic by Handle for notification of button presses #1050

JBHudston · 2025-10-17T10:57:04Z

JBHudston
Oct 17, 2025

Hi all,
I'm way out of my depth but thick I'm so close to getting this to work.
I want to control a ESP WROOM 32 with a FireTV BLE remote.
I've used Wireshark to read a debug log from my phone and also used nRF Connect to try to work out the UUIDs, Services, Characteristics and Handles used. I believe the phone connects to the remote then writes "0100" to Characteristics with Handles:

0x005f
0x0063
0x0067
0x006b
0x0078

185	7.084661	remote ()	SamsungElect_16:48:0d (No name's A23)	ATT	504	Rcvd Read Request, Handle: 0x10ff (Unknown)
934	2355.190185	remote ()	SamsungElect_16:48:0d (No name's A23)	ATT	485	Rcvd Read Request, Handle: 0x20ff (Unknown)
1458	2421.302372	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	16	Sent Read By Type Request, PnP ID, Handles: 0x0001..0xffff
1492	2421.473841	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Exchange MTU Request, Client Rx MTU: 251
1493	2421.474550	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1494	2421.475452	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	20	Rcvd Read By Type Response, Attribute List Length: 1
1496	2421.476847	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Exchange MTU Response, Server Rx MTU: 517
1498	2421.477903	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	16	Sent Read By Type Request, Server Supported Features, Handles: 0x0001..0xffff
1506	2421.563789	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	14	Rcvd Error Response - Attribute Not Found, Handle: 0x0001 (Unknown)
1507	2421.565025	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x0054 (Unknown)
1509	2421.654346	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	14	Rcvd Read Response, Handle: 0x0054 (Unknown)
1510	2421.655665	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x0056 (Unknown)
1513	2421.746137	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	159	Rcvd Read Response, Handle: 0x0056 (Unknown)
1514	2421.747587	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x0057 (Unknown)
1516	2421.844368	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Read Response, Handle: 0x0057 (Unknown)
1518	2421.845865	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x0060 (Unknown)
1521	2421.923822	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Read Response, Handle: 0x0060 (Unknown)
1522	2421.925756	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x0064 (Unknown)
1524	2421.965344	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Read Response, Handle: 0x0064 (Unknown)
1526	2421.967069	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x0068 (Unknown)
1528	2422.004616	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Read Response, Handle: 0x0068 (Unknown)
1529	2422.006107	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x006c (Unknown)
1531	2422.043822	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Read Response, Handle: 0x006c (Unknown)
1532	2422.046036	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x006f (Unknown)
1534	2422.083748	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Read Response, Handle: 0x006f (Unknown)
1535	2422.085040	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x0072 (Unknown)
1537	2422.123734	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Read Response, Handle: 0x0072 (Unknown)
1538	2422.125090	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x0075 (Unknown)
1544	2422.163954	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Read Response, Handle: 0x0075 (Unknown)
1548	2422.165641	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x0079 (Unknown)
1551	2422.204186	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	12	Rcvd Read Response, Handle: 0x0079 (Unknown)
1552	2422.206027	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	12	Sent Read Request, Handle: 0x001a (Unknown)
1554	2422.244418	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	18	Rcvd Read Response, Handle: 0x001a (Unknown)
1556	2422.247474	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	14	Sent Write Request, Handle: 0x005f (Unknown)
1560	2422.324143	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	10	Rcvd Write Response, Handle: 0x005f (Unknown)
1561	2422.326087	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	14	Sent Write Request, Handle: 0x0063 (Unknown)
1563	2422.364068	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	10	Rcvd Write Response, Handle: 0x0063 (Unknown)
1564	2422.365788	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	14	Sent Write Request, Handle: 0x0067 (Unknown)
1566	2422.406606	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	10	Rcvd Write Response, Handle: 0x0067 (Unknown)
1568	2422.408355	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	14	Sent Write Request, Handle: 0x006b (Unknown)
1570	2422.443864	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	10	Rcvd Write Response, Handle: 0x006b (Unknown)
1571	2422.445540	SamsungElect_16:48:0d (No name's A23)	AmazonTechno_b5:1e:f3 ()	ATT	14	Sent Write Request, Handle: 0x0078 (Unknown)
1573	2422.484894	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	10	Rcvd Write Response, Handle: 0x0078 (Unknown)
1575	2424.443325	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1582	2424.750578	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1584	2424.845895	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1586	2424.924411	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1602	2425.044378	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1603	2425.126690	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1604	2425.266068	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1606	2425.344156	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1607	2425.465907	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1615	2425.545241	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1616	2425.666776	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1618	2425.747408	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1620	2425.868765	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1621	2425.948367	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1622	2426.067545	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1625	2426.170517	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1627	2426.286265	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1629	2426.367445	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1630	2426.508969	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1632	2427.657306	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1640	2427.727578	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1642	2427.826260	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1643	2427.905846	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1644	2427.989269	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1646	2428.105656	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1647	2428.188953	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1649	2428.285375	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1650	2428.390842	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1654	2428.487121	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1655	2428.567472	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1657	2428.665765	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1659	2428.767026	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1661	2428.871661	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1663	2428.945241	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1664	2429.087157	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1666	2429.148598	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1667	2429.249498	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1669	2429.328263	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1670	2429.467989	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1672	2429.527399	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1673	2429.649784	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1675	2429.745788	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1676	2429.865973	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1677	2429.950247	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1679	2430.047894	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1680	2430.130372	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1682	2430.245796	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1683	2430.350462	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1685	2430.489678	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	15	Rcvd Handle Value Notification, Handle: 0x005e (Unknown)
1687	2431.216242	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1691	2431.304713	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1692	2431.384312	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1693	2431.506499	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1696	2431.584179	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1697	2431.686536	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1699	2431.826028	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1703	2431.946742	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1704	2432.027863	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1705	2432.166925	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1708	2432.245663	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1709	2432.387681	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1711	2432.465983	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1712	2432.589535	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1714	2432.687410	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1715	2432.810115	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1718	2432.905414	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1719	2433.028675	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1721	2433.127553	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1722	2433.252034	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1724	2433.349503	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1725	2433.467935	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1727	2433.569557	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1729	2433.688913	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1730	2433.786646	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1731	2433.908178	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1733	2434.005363	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1734	2434.125731	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1736	2434.206055	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)
1737	2434.327675	AmazonTechno_b5:1e:f3 ()	SamsungElect_16:48:0d (No name's A23)	ATT	16	Rcvd Handle Value Notification, Handle: 0x0062 (Unknown)

Then setup Armbian on my T95Z Plus TV box to connect to the remote and try to work out the button presses with btmon and gatttool:

root@aml-s9xx-box:~# gatttool -I
[                 ][LE]> connect 08:57:FB:B5:1E:F3
Attempting to connect to 08:57:FB:B5:1E:F3
Error: connect to 08:57:FB:B5:1E:F3: Device or resource busy (16)
[08:57:FB:B5:1E:F3][LE]> connect 08:57:FB:B5:1E:F3
Attempting to connect to 08:57:FB:B5:1E:F3
Connection successful
[08:57:FB:B5:1E:F3][LE]>
(gatttool:9668): GLib-WARNING **: 10:50:12.245: Invalid file descriptor.
[08:57:FB:B5:1E:F3][LE]> primary
Command Failed: Disconnected
[08:57:FB:B5:1E:F3][LE]> primary
Command Failed: Disconnected
[08:57:FB:B5:1E:F3][LE]> connect 08:57:FB:B5:1E:F3
Attempting to connect to 08:57:FB:B5:1E:F3
Connection successful
[08:57:FB:B5:1E:F3][LE]> primary
attr handle: 0x0001, end grp handle: 0x0001 uuid: 00001801-0000-1000-8000-00805f9b34fb
attr handle: 0x0014, end grp handle: 0x001a uuid: 00001800-0000-1000-8000-00805f9b34fb
attr handle: 0x0028, end grp handle: 0x0038 uuid: 0000180a-0000-1000-8000-00805f9b34fb
attr handle: 0x0040, end grp handle: 0x0044 uuid: 0000180f-0000-1000-8000-00805f9b34fb
attr handle: 0x004a, end grp handle: 0x004c uuid: 00001813-0000-1000-8000-00805f9b34fb
attr handle: 0x004f, end grp handle: 0x0079 uuid: 00001812-0000-1000-8000-00805f9b34fb
attr handle: 0xfda2, end grp handle: 0xfdaa uuid: 5de20000-5e8d-11e6-8b77-86f30ca893d3
attr handle: 0xfe02, end grp handle: 0xfe0d uuid: cfbfa000-762c-4912-a043-20e3ecde0a2d
[08:57:FB:B5:1E:F3][LE]> primary 1812
Starting handle: 0x004f Ending handle: 0x0079
[08:57:FB:B5:1E:F3][LE]>
[08:57:FB:B5:1E:F3][LE]> characteristics 4f 79
handle: 0x0051, char properties: 0x04, char value handle: 0x0052, uuid: 00002a4c-0000-1000-8000-00805f9b34fb
handle: 0x0053, char properties: 0x02, char value handle: 0x0054, uuid: 00002a4a-0000-1000-8000-00805f9b34fb
handle: 0x0055, char properties: 0x02, char value handle: 0x0056, uuid: 00002a4b-0000-1000-8000-00805f9b34fb
handle: 0x005d, char properties: 0x12, char value handle: 0x005e, uuid: 00002a4d-0000-1000-8000-00805f9b34fb
handle: 0x0061, char properties: 0x12, char value handle: 0x0062, uuid: 00002a4d-0000-1000-8000-00805f9b34fb
handle: 0x0065, char properties: 0x12, char value handle: 0x0066, uuid: 00002a4d-0000-1000-8000-00805f9b34fb
handle: 0x0069, char properties: 0x12, char value handle: 0x006a, uuid: 00002a4d-0000-1000-8000-00805f9b34fb
handle: 0x006d, char properties: 0x0a, char value handle: 0x006e, uuid: 00002a4d-0000-1000-8000-00805f9b34fb
handle: 0x0070, char properties: 0x0a, char value handle: 0x0071, uuid: 00002a4d-0000-1000-8000-00805f9b34fb
handle: 0x0073, char properties: 0x0a, char value handle: 0x0074, uuid: 00002a4d-0000-1000-8000-00805f9b34fb
handle: 0x0076, char properties: 0x12, char value handle: 0x0077, uuid: 00002a4d-0000-1000-8000-00805f9b34fb
[08:57:FB:B5:1E:F3][LE]>
(gatttool:9668): GLib-WARNING **: 11:29:10.442: Invalid file descriptor.

All the previous mentioned Handles have the same UUID "00002a4d-0000-1000-8000-00805f9b34fb".

root@aml-s9xx-box:~# btmon
Bluetooth monitor ver 5.79
btmon[9558]: = Note: Linux version 6.16.11-edge-meson64 (aarch64)                                           0.690375
btmon[9558]: = Note: Bluetooth subsystem version 2.22                                                       0.690392
= New Index: AA:AA:AA:AA:AA:AA (Primary,UART,hci0)                                                   [hci0] 0.690399
= Open Index: AA:AA:AA:AA:AA:AA                                                                      [hci0] 0.690403
= Index Info: AA:AA:AA:AA:AA:AA (Broadcom Corporation)                                               [hci0] 0.690407
bluetoothd[1743]: @ MGMT Open: bluetoothd (privileged) version 1.23                                {0x0001} 0.690414
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                      #1 [hci0] 10.984188
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 510000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                      #2 [hci0] 11.103595
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 000000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                      #3 [hci0] 15.503650
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 520000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                      #4 [hci0] 15.603644
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 000000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                      #5 [hci0] 17.943664
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 520000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                      #6 [hci0] 18.123698
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 000000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                      #7 [hci0] 18.823689
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 4f0000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                      #8 [hci0] 19.003716
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 000000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                      #9 [hci0] 20.504319
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 500000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                     #10 [hci0] 20.563724
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 000000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                     #11 [hci0] 21.863717
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 500000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                     #12 [hci0] 23.163745
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 000000
> HCI Event: Authenticated Payload Timeout Expired (0x57) plen 2                                #13 [hci0] 53.183500
        Handle: 64
> HCI Event: Authenticated Payload Timeout Expired (0x57) plen 2                                #14 [hci0] 84.283905
        Handle: 64
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                     #15 [hci0] 94.185249
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 580000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                     #16 [hci0] 94.264640
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                     #17 [hci0] 98.344717
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 21020000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                     #18 [hci0] 98.444737
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #19 [hci0] 108.484865
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 40000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #20 [hci0] 108.524862
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #21 [hci0] 109.844876
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 23020000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #22 [hci0] 109.964870
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                    #23 [hci0] 110.904841
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: f10000
> ACL Data RX: Handle 64 flags 0x02 dlen 10                                                    #24 [hci0] 111.044851
      ATT: Handle Value Notification (0x1b) len 5
        Handle: 0x005e
          Data[3]: 000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #25 [hci0] 112.265493
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: b4000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #26 [hci0] 112.324900
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #27 [hci0] 112.984907
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: cd000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #28 [hci0] 113.124910
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #29 [hci0] 113.644927
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: b3000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #30 [hci0] 113.804928
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #31 [hci0] 114.324905
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 8d000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #32 [hci0] 114.484931
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #33 [hci0] 114.964928
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: e9000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #34 [hci0] 115.124969
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #35 [hci0] 115.604942
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: e2000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #36 [hci0] 115.744915
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #37 [hci0] 117.725546
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: ea000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #38 [hci0] 117.784984
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0062
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #39 [hci0] 119.784963
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0077
          Data[4]: a2000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #40 [hci0] 119.945015
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0077
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #41 [hci0] 121.785615
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0077
          Data[4]: a1000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #42 [hci0] 121.845017
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0077
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #43 [hci0] 122.325027
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0077
          Data[4]: a3000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #44 [hci0] 122.465010
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0077
          Data[4]: 00000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #45 [hci0] 122.905010
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0077
          Data[4]: a4000000
> ACL Data RX: Handle 64 flags 0x02 dlen 11                                                    #46 [hci0] 123.065045
      ATT: Handle Value Notification (0x1b) len 6
        Handle: 0x0077
          Data[4]: 00000000
> HCI Event: Authenticated Payload Timeout Expired (0x57) plen 2                               #47 [hci0] 153.084728
        Handle: 64

I've used example NimBLE_Client.ino and copied the Service and Characteristic UUIDs in here:

/** Define a class to handle the callbacks when scan events are received */
class ScanCallbacks : public NimBLEScanCallbacks {
    void onResult(const NimBLEAdvertisedDevice* advertisedDevice) override {
        Serial.printf("Advertised Device found: %s\n", advertisedDevice->toString().c_str());
        if (advertisedDevice->isAdvertisingService(NimBLEUUID("00001812-0000-1000-8000-00805f9b34fb"))) {
            Serial.printf("Found Our Service\n");
            /** stop scan before connecting */
            NimBLEDevice::getScan()->stop();
            /** Save the device reference in a global for the client to use*/
            advDevice = advertisedDevice;
            /** Ready to connect now */
            doConnect = true;
        }
    }

    /** Now we can read/write/subscribe the characteristics of the services we are interested in */
    NimBLERemoteService*        pSvc = nullptr;
    NimBLERemoteCharacteristic* pChr = nullptr;
    NimBLERemoteDescriptor*     pDsc = nullptr;

    pSvc = pClient->getService("00001812-0000-1000-8000-00805f9b34fb");
    if (pSvc) {
        pChr = pSvc->getCharacteristic("00002a4d-0000-1000-8000-00805f9b34fb");
        Serial.printf("%s Value: %s\n", pChr->getUUID().toString().c_str(), pChr->readValue().c_str());
        Characteristic_Value = pChr->readValue().c_str();

            if (pChr->canNotify()) {
                if (!pChr->subscribe(true, notifyCB)) {
                    Serial.print("Characteristic Subscribed?");
                    pClient->disconnect();
                    return false;
                }
            }


    }
    return true;
}

I've enabled debug in Arduino Tools>Core Debug Level>Debug and reflashed the ESP32:

I NimBLEDevice: BLE Host Task Started
I NimBLEDevice: NimBle host synced.
D NimBLEScan: >> start: duration=5000
D NimBLEScan: Scan started
D NimBLEScan: << start()
Scanning for peripherals
=========== After Setup Start ============
INTERNAL Memory Info:
------------------------------------------
I NimBLEScan: New advertiser: 30:c4:fb:98:9c:6b
D NimBLEScanCallbacks: Discovered: Name: , Address: 30:c4:fb:98:9c:6b
Service Data:
UUID: 0xfcf1, Data: �
I NimBLEScan: Scan response from: 30:c4:fb:98:9c:6b
Advertised Device found: Name: , Address: 30:c4:fb:98:9c:6b
Service Data:
UUID: 0xfcf1, Data: �
I NimBLEScan: New advertiser: 08:57:fb:b5:1e:f3
D NimBLEScanCallbacks: Discovered: Name: AR, Address: 08:57:fb:b5:1e:f3, appearance: 384, manufacturer data: 7101041e, serviceUUID: 0x1812
I NimBLEScan: Scan response from: 08:57:fb:b5:1e:f3
Advertised Device found: Name: AR, Address: 08:57:fb:b5:1e:f3, appearance: 384, manufacturer data: 7101041e, serviceUUID: 0x1812
Found Our Service
D NimBLEScan: >> stop()
D NimBLEScan: << stop()
  Total Size        :   293804 B ( 286.9 KB)
  Free Bytes        :   215756 B ( 210.7 KB)
  Allocated Bytes   :    70900 B (  69.2 KB)
  Minimum Free Bytes:   215692 B ( 210.6 KB)
  Largest Free Block:   110580 B ( 108.0 KB)
------------------------------------------
GPIO Info:
------------------------------------------
  GPIO : BUS_TYPE[bus/unit][chan]
  --------------------------------------  
     1 : UART_TX[0]
     3 : UART_RX[0]
============ After Setup End =============
New client created
D NimBLEClient: >> connect(08:57:fb:b5:1e:f3)
D NimBLEClient: >> handleGapEvent BLE_GAP_EVENT_CONNECT 
D NimBLEClient: >> handleGapEvent BLE_GAP_EVENT_LINK_ESTAB
D NimBLEClient: >> handleGapEvent BLE_GAP_EVENT_DATA_LEN_CHG
D NimBLEClient: >> handleGapEvent BLE_GAP_EVENT_MTU
I NimBLEClient: mtu update: mtu=251
D NimBLEClientCallbacks: onMTUChange: default
CD NimBLEClient: << handleGapEvent
D NimBLEClient: exchangeMTUCb: status=0, mtu=251
onnected
D NimBLEClient: << connect()
Connected to: 08:57:fb:b5:1e:f3 RSSI: -38
D NimBLEClient: >> getService: uuid: 00001812-0000-1000-8000-00805f9b34fb
D NimBLEClient: Service Discovered >> status: 14 handle: -1
D NimBLEClient: << Service Discovered
D NimBLEClient: Service Discovered >> status: 0 handle: 79
D NimBLEClient: Service Discovered >> status: 14 handle: -1
D NimBLEClient: << Service Discovered
D NimBLERemoteService: >> getCharacteristic: uuid: 00002a4d-0000-1000-8000-00805f9b34fb
D NimBLERemoteService: >> retrieveCharacteristics()
D NimBLERemoteService: Characteristic Discovery >> status: 14 handle: -1
D NimBLERemoteService: << Characteristic Discovery
D NimBLERemoteService: << retrieveCharacteristics()
D NimBLERemoteService: >> retrieveCharacteristics()
D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 93
D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 97
D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 101
D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 105
D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 109
D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 112
D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 115
D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 118
D NimBLERemoteService: Characteristic Discovery >> status: 14 handle: -1
D NimBLERemoteService: << Characteristic Discovery
D NimBLERemoteService: << retrieveCharacteristics()
D NimBLERemoteService: << Characteristic found
D NimBLERemoteValueAttribute: >> readValue()
I NimBLERemoteValueAttribute: Read complete; status=0
D NimBLERemoteValueAttribute: Got 4 bytes
I NimBLERemoteValueAttribute: Read complete; status=14
D NimBLERemoteValueAttribute: << readValue
0x2a4d Value: 
D NimBLERemoteValueAttribute: >> readValue()
I NimBLERemoteValueAttribute: Read complete; status=0
D NimBLERemoteValueAttribute: Got 4 bytes
I NimBLERemoteValueAttribute: Read complete; status=14
D NimBLERemoteValueAttribute: << readValue
D NimBLERemoteCharacteristic: >> setNotify()
D NimBLERemoteCharacteristic: >> getDescriptor: uuid: 0x2902
D NimBLERemoteCharacteristic: >> retrieveDescriptors() for characteristic: 0x2a4d
D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 120
D NimBLERemoteCharacteristic: << Descriptor Discovery
D NimBLERemoteCharacteristic: << retrieveDescriptors(): found 1 descriptors.
D NimBLERemoteCharacteristic: << getDescriptor: found
D NimBLERemoteCharacteristic: << setNotify()
D NimBLERemoteValueAttribute: >> writeValue()
I NimBLERemoteValueAttribute: Write complete; status=0
D NimBLERemoteValueAttribute: << writeValue
Success! we should now be getting notifications, scanning for more!

Can someone please tell me if "!pChr->subscribe(true, notifyCB)" subscribes to the Characteristic (pChr = pSvc->getCharacteristic("00002a4d-0000-1000-8000-00805f9b34fb")) for all the handles for button press notifications or does it have to subscribe to each handle separately and if so how can this be done?

Appreciate any help as I've spent ages stabbing in the dark. :)

h2zero · 2025-10-20T20:14:39Z

h2zero
Oct 20, 2025
Maintainer

You've done well, unfortunately you've run into a missing API. There currently is not a way to differentiate between characteristics that have the same uuid and the library will just provide the first one found.

8 replies

h2zero Oct 29, 2025
Maintainer

Subscribing to notifications will work the same, internally this all works by handles.

JBHudston Oct 29, 2025
Author

Great. Something to look forward to when I have to go home. :)

JBHudston Nov 5, 2025
Author

Back home now but NimBLE_Client won't compile with the additional 2 lines at line 159.
Is it an issue with 'm_characteristicVector' in NimBLERemoteService.cpp or have I done something stupid?

    /** Now we can read/write/subscribe the characteristics of the services we are interested in */
    NimBLERemoteService*        pSvc = nullptr;
    // NimBLERemoteCharacteristic* pChr = nullptr;
    NimBLERemoteDescriptor*     pDsc = nullptr;

    pClient->discoverAttributes();
    auto pChr = pClient->getCharacteristic(0x005e);

    pSvc = pClient->getService("DEAD");
    if (pSvc) {
        pChr = pSvc->getCharacteristic("BEEF");
    }

Full code:


/** NimBLE_Client Demo:
 *
 *  Demonstrates many of the available features of the NimBLE client library.
 *
 *  Created: on March 24 2020
 *      Author: H2zero
 */

#include <Arduino.h>
#include <NimBLEDevice.h>

static const NimBLEAdvertisedDevice* advDevice;
static bool                          doConnect  = false;
static uint32_t                      scanTimeMs = 5000; /** scan time in milliseconds, 0 = scan forever */

/**  None of these are required as they will be handled by the library with defaults. **
 **                       Remove as you see fit for your needs                        */
class ClientCallbacks : public NimBLEClientCallbacks {
    void onConnect(NimBLEClient* pClient) override { Serial.printf("Connected\n"); }

    void onDisconnect(NimBLEClient* pClient, int reason) override {
        Serial.printf("%s Disconnected, reason = %d - Starting scan\n", pClient->getPeerAddress().toString().c_str(), reason);
        NimBLEDevice::getScan()->start(scanTimeMs, false, true);
    }

    /********************* Security handled here *********************/
    void onPassKeyEntry(NimBLEConnInfo& connInfo) override {
        Serial.printf("Server Passkey Entry\n");
        /**
         * This should prompt the user to enter the passkey displayed
         * on the peer device.
         */
        NimBLEDevice::injectPassKey(connInfo, 123456);
    }

    void onConfirmPasskey(NimBLEConnInfo& connInfo, uint32_t pass_key) override {
        Serial.printf("The passkey YES/NO number: %" PRIu32 "\n", pass_key);
        /** Inject false if passkeys don't match. */
        NimBLEDevice::injectConfirmPasskey(connInfo, true);
    }

    /** Pairing process complete, we can check the results in connInfo */
    void onAuthenticationComplete(NimBLEConnInfo& connInfo) override {
        if (!connInfo.isEncrypted()) {
            Serial.printf("Encrypt connection failed - disconnecting\n");
            /** Find the client with the connection handle provided in connInfo */
            NimBLEDevice::getClientByHandle(connInfo.getConnHandle())->disconnect();
            return;
        }
    }
} clientCallbacks;

/** Define a class to handle the callbacks when scan events are received */
class ScanCallbacks : public NimBLEScanCallbacks {
    void onResult(const NimBLEAdvertisedDevice* advertisedDevice) override {
        Serial.printf("Advertised Device found: %s\n", advertisedDevice->toString().c_str());
        if (advertisedDevice->isAdvertisingService(NimBLEUUID("00001812-0000-1000-8000-00805f9b34fb"))) {
            Serial.printf("Found Our Service\n");
            /** stop scan before connecting */
            NimBLEDevice::getScan()->stop();
            /** Save the device reference in a global for the client to use*/
            advDevice = advertisedDevice;
            /** Ready to connect now */
            doConnect = true;
        }
    }

    /** Callback to process the results of the completed scan or restart it */
    void onScanEnd(const NimBLEScanResults& results, int reason) override {
        Serial.printf("Scan Ended, reason: %d, device count: %d; Restarting scan\n", reason, results.getCount());
        NimBLEDevice::getScan()->start(scanTimeMs, false, true);
    }
} scanCallbacks;

/** Notification / Indication receiving handler callback */
void notifyCB(NimBLERemoteCharacteristic* pRemoteCharacteristic, uint8_t* pData, size_t length, bool isNotify) {
    std::string str  = (isNotify == true) ? "Notification" : "Indication";
    str             += " from ";
    str             += pRemoteCharacteristic->getClient()->getPeerAddress().toString();
    str             += ": Service = " + pRemoteCharacteristic->getRemoteService()->getUUID().toString();
    str             += ", Characteristic = " + pRemoteCharacteristic->getUUID().toString();
    str             += ", Value = " + std::string((char*)pData, length);
    Serial.printf("%s\n", str.c_str());
}

/** Handles the provisioning of clients and connects / interfaces with the server */
bool connectToServer() {
    NimBLEClient* pClient = nullptr;

    /** Check if we have a client we should reuse first **/
    if (NimBLEDevice::getCreatedClientCount()) {
        /**
         *  Special case when we already know this device, we send false as the
         *  second argument in connect() to prevent refreshing the service database.
         *  This saves considerable time and power.
         */
        pClient = NimBLEDevice::getClientByPeerAddress(advDevice->getAddress());
        if (pClient) {
            if (!pClient->connect(advDevice, false)) {
                Serial.printf("Reconnect failed\n");
                return false;
            }
            Serial.printf("Reconnected client\n");
        } else {
            /**
             *  We don't already have a client that knows this device,
             *  check for a client that is disconnected that we can use.
             */
            pClient = NimBLEDevice::getDisconnectedClient();
        }
    }

    /** No client to reuse? Create a new one. */
    if (!pClient) {
        if (NimBLEDevice::getCreatedClientCount() >= NIMBLE_MAX_CONNECTIONS) {
            Serial.printf("Max clients reached - no more connections available\n");
            return false;
        }

        pClient = NimBLEDevice::createClient();

        Serial.printf("New client created\n");

        pClient->setClientCallbacks(&clientCallbacks, false);
        /**
         *  Set initial connection parameters:
         *  These settings are safe for 3 clients to connect reliably, can go faster if you have less
         *  connections. Timeout should be a multiple of the interval, minimum is 100ms.
         *  Min interval: 12 * 1.25ms = 15, Max interval: 12 * 1.25ms = 15, 0 latency, 150 * 10ms = 1500ms timeout
         */
        pClient->setConnectionParams(12, 12, 0, 150);

        /** Set how long we are willing to wait for the connection to complete (milliseconds), default is 30000. */
        pClient->setConnectTimeout(5 * 1000);

        if (!pClient->connect(advDevice)) {
            /** Created a client but failed to connect, don't need to keep it as it has no data */
            NimBLEDevice::deleteClient(pClient);
            Serial.printf("Failed to connect, deleted client\n");
            return false;
        }
    }

    if (!pClient->isConnected()) {
        if (!pClient->connect(advDevice)) {
            Serial.printf("Failed to connect\n");
            return false;
        }
    }

    Serial.printf("Connected to: %s RSSI: %d\n", pClient->getPeerAddress().toString().c_str(), pClient->getRssi());

    /** Now we can read/write/subscribe the characteristics of the services we are interested in */
    NimBLERemoteService*        pSvc = nullptr;
    // NimBLERemoteCharacteristic* pChr = nullptr;
    NimBLERemoteDescriptor*     pDsc = nullptr;

    pClient->discoverAttributes();
    auto pChr = pClient->getCharacteristic(0x005e);

    pSvc = pClient->getService("DEAD");
    if (pSvc) {
        pChr = pSvc->getCharacteristic("BEEF");
    }

    if (pChr) {
        if (pChr->canRead()) {
            Serial.printf("%s Value: %s\n", pChr->getUUID().toString().c_str(), pChr->readValue().c_str());
        }

        if (pChr->canWrite()) {
            if (pChr->writeValue("Tasty")) {
                Serial.printf("Wrote new value to: %s\n", pChr->getUUID().toString().c_str());
            } else {
                pClient->disconnect();
                return false;
            }

            if (pChr->canRead()) {
                Serial.printf("The value of: %s is now: %s\n", pChr->getUUID().toString().c_str(), pChr->readValue().c_str());
            }
        }

        if (pChr->canNotify()) {
            if (!pChr->subscribe(true, notifyCB)) {
                pClient->disconnect();
                return false;
            }
        } else if (pChr->canIndicate()) {
            /** Send false as first argument to subscribe to indications instead of notifications */
            if (!pChr->subscribe(false, notifyCB)) {
                pClient->disconnect();
                return false;
            }
        }
    } else {
        Serial.printf("DEAD service not found.\n");
    }

    pSvc = pClient->getService("BAAD");
    if (pSvc) {
        pChr = pSvc->getCharacteristic("F00D");
        if (pChr) {
            if (pChr->canRead()) {
                Serial.printf("%s Value: %s\n", pChr->getUUID().toString().c_str(), pChr->readValue().c_str());
            }

            pDsc = pChr->getDescriptor(NimBLEUUID("C01D"));
            if (pDsc) {
                Serial.printf("Descriptor: %s  Value: %s\n", pDsc->getUUID().toString().c_str(), pDsc->readValue().c_str());
            }

            if (pChr->canWrite()) {
                if (pChr->writeValue("No tip!")) {
                    Serial.printf("Wrote new value to: %s\n", pChr->getUUID().toString().c_str());
                } else {
                    pClient->disconnect();
                    return false;
                }

                if (pChr->canRead()) {
                    Serial.printf("The value of: %s is now: %s\n",
                                  pChr->getUUID().toString().c_str(),
                                  pChr->readValue().c_str());
                }
            }

            if (pChr->canNotify()) {
                if (!pChr->subscribe(true, notifyCB)) {
                    pClient->disconnect();
                    return false;
                }
            } else if (pChr->canIndicate()) {
                /** Send false as first argument to subscribe to indications instead of notifications */
                if (!pChr->subscribe(false, notifyCB)) {
                    pClient->disconnect();
                    return false;
                }
            }
        }
    } else {
        Serial.printf("BAAD service not found.\n");
    }

    Serial.printf("Done with this device!\n");
    return true;
}

void setup() {
    Serial.begin(115200);
    Serial.printf("Starting NimBLE Client\n");

    /** Initialize NimBLE and set the device name */
    NimBLEDevice::init("NimBLE-Client");

    /**
     * Set the IO capabilities of the device, each option will trigger a different pairing method.
     *  BLE_HS_IO_KEYBOARD_ONLY   - Passkey pairing
     *  BLE_HS_IO_DISPLAY_YESNO   - Numeric comparison pairing
     *  BLE_HS_IO_NO_INPUT_OUTPUT - DEFAULT setting - just works pairing
     */
    // NimBLEDevice::setSecurityIOCap(BLE_HS_IO_KEYBOARD_ONLY); // use passkey
    // NimBLEDevice::setSecurityIOCap(BLE_HS_IO_DISPLAY_YESNO); //use numeric comparison

    /**
     * 2 different ways to set security - both calls achieve the same result.
     *  no bonding, no man in the middle protection, BLE secure connections.
     *  These are the default values, only shown here for demonstration.
     */
    // NimBLEDevice::setSecurityAuth(false, false, true);
    // NimBLEDevice::setSecurityAuth(BLE_SM_PAIR_AUTHREQ_BOND | BLE_SM_PAIR_AUTHREQ_MITM | BLE_SM_PAIR_AUTHREQ_SC);

    /** Optional: set the transmit power */
    NimBLEDevice::setPower(3); /** 3dbm */
    NimBLEScan* pScan = NimBLEDevice::getScan();

    /** Set the callbacks to call when scan events occur, no duplicates */
    pScan->setScanCallbacks(&scanCallbacks, false);

    /** Set scan interval (how often) and window (how long) in milliseconds */
    pScan->setInterval(100);
    pScan->setWindow(100);

    /**
     * Active scan will gather scan response data from advertisers
     *  but will use more energy from both devices
     */
    pScan->setActiveScan(true);

    /** Start scanning for advertisers */
    pScan->start(scanTimeMs);
    Serial.printf("Scanning for peripherals\n");
}

void loop() {
    /** Loop here until we find a device we want to connect to */
    delay(10);

    if (doConnect) {
        doConnect = false;
        /** Found a device we want to connect to, do it now */
        if (connectToServer()) {
            Serial.printf("Success! we should now be getting notifications, scanning for more!\n");
        } else {
            Serial.printf("Failed to connect, starting scan\n");
        }

        NimBLEDevice::getScan()->start(scanTimeMs, false, true);
    }
}

Error log:

c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp: In member function 'NimBLERemoteCharacteristic* NimBLERemoteService::getCharacteristic(const NimBLEUUID&, uint16_t)':
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:85:19: error: 'm_characteristicVector' was not declared in this scope; did you mean 'characteristicDiscCB'?
   85 |     for(auto &it: m_characteristicVector) {
      |                   ^~~~~~~~~~~~~~~~~~~~~~
      |                   characteristicDiscCB
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:93:24: error: 'm_characteristicVector' was not declared in this scope; did you mean 'characteristicDiscCB'?
   93 |     size_t prev_size = m_characteristicVector.size();
      |                        ^~~~~~~~~~~~~~~~~~~~~~
      |                        characteristicDiscCB
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp: In member function 'bool NimBLERemoteService::retrieveCharacteristics(uint16_t, const NimBLEUUID*)':
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:136:5: error: 'ble_task_data_t' was not declared in this scope
  136 |     ble_task_data_t taskData = {this, cur_task, 0, nullptr};
      |     ^~~~~~~~~~~~~~~
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:139:49: error: 'class NimBLEClient' has no member named 'getConnId'; did you mean 'getConfig'?
  139 |         rc = ble_gattc_disc_all_chrs(m_pClient->getConnId(),
      |                                                 ^~~~~~~~~
      |                                                 getConfig
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:140:30: error: 'm_startHandle' was not declared in this scope; did you mean 'getStartHandle'?
  140 |                              m_startHandle,
      |                              ^~~~~~~~~~~~~
      |                              getStartHandle
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:143:31: error: 'taskData' was not declared in this scope
  143 |                              &taskData);
      |                               ^~~~~~~~
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:145:53: error: 'class NimBLEClient' has no member named 'getConnId'; did you mean 'getConfig'?
  145 |         rc = ble_gattc_disc_chrs_by_uuid(m_pClient->getConnId(),
      |                                                     ^~~~~~~~~
      |                                                     getConfig
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:146:30: error: 'm_startHandle' was not declared in this scope; did you mean 'getStartHandle'?
  146 |                              m_startHandle,
      |                              ^~~~~~~~~~~~~
      |                              getStartHandle
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:148:44: error: 'const class NimBLEUUID' has no member named 'getNative'
  148 |                              &uuid_filter->getNative()->u,
      |                                            ^~~~~~~~~
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:150:31: error: 'taskData' was not declared in this scope
  150 |                              &taskData);
      |                               ^~~~~~~~
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:164:8: error: 'taskData' was not declared in this scope
  164 |     if(taskData.rc == 0){
      |        ^~~~~~~~
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:166:17: error: 'm_characteristicVector' was not declared in this scope; did you mean 'characteristicDiscCB'?
  166 |             if (m_characteristicVector.size() > 1) {
      |                 ^~~~~~~~~~~~~~~~~~~~~~
      |                 characteristicDiscCB
c:\Users\Spudgun\Documents\Arduino\libraries\NimBLE-Arduino\src\NimBLERemoteService.cpp:176:17: error: 'm_characteristicVector' was not declared in this scope; did you mean 'characteristicDiscCB'?
  176 |             if (m_characteristicVector.size() > 0) {
      |                 ^~~~~~~~~~~~~~~~~~~~~~
      |                 characteristicDiscCB
exit status 1

Compilation error: exit status 1

JBHudston Nov 5, 2025
Author

Deleting the library and adding the latest zip fixed the compile issue but I get the following debug log following "pClient->discoverAttributes();"

UUID: 0xfef3, Data: J�#EVXV�2����wB��y��
�����
Advertised Device found: Name: , Address: 2f:d0:59:c6:73:94
Service Data:
UUID: 0xfef3, Data: J�#EVXV�2����wB��y��
�����
I NimBLEScan: Duplicate; updated: 08:57:fb:b5:1e:f3
D NimBLEScanCallbacks: Discovered: Name: AR, Address: 08:57:fb:b5:1e:f3, appearance: 384, manufacturer data: 7101041e, serviceUUID: 0x1812
Advertised Device found: Name: AR, Address: 08:57:fb:b5:1e:f3, appearance: 384, manufacturer data: 7101041e, serviceUUID: 0x1812
Found Our Service
D NimBLEScan: >> stop()
D NimBLEScan: << stop()
New client created
D NimBLEClient: >> connect(08:57:fb:b5:1e:f3)
D NimBLEClient: >> handleGapEvent 
D NimBLEClient: >> handleGapEvent 
D NimBLEClient: >> handleGapEvent 
D NimBLEClient: >> handleGapEvent 
I NimBLEClient: mtu update: mtu=251
D NimBLEClientCallbacks: onMTUChange: default
D NimBLEClCient: << handleGapEvent
D NimBLEClient: exchangeMTUCb: status=0, mtu=251
onnected
D NimBLEClient: << connect()
Connected to: 08:57:fb:b5:1e:f3 RSSI: -59
Discovering Attributes
D NimBLEClient: Service Discovered >> status: 0 handle: 1
D NimBLEClient: Service Discovered >> status: 0 handle: 20
D NimBLEClient: Service Discovered >> status: 0 handle: 40
D NimBLEClient: Service Discovered >> status: 0 handle: 64
D NimBLEClient: Service Discovered >> status: 0 handle: 74
D NimBLEClient: Service Discovered >> status: 0 handle: 79
D NimBLEClient: Service Discovered >> status: 0 handle: 64930
D NimBLEClient: Service Discovered >> status: 0 handle: 65026
D NimBLEClient: Service Discovered >> status: 10 handle: -1
D NimBLEClient: << Service Discovered
E NimBLEClient: Could not retrieve services, rc=10 
Discovered Attributes
Guru Meditation Error: Core  1 panic'ed (LoadProhibited). Exception was unhandled.

Core  1 register dump:
PC      : 0x40126f7b  PS      : 0x00060730  A0      : 0x800d25be  A1      : 0x3ffca560  
A2      : 0x00000000  A3      : 0x0000005e  A4      : 0x3ffcf16c  A5      : 0xffffffc5  
A6      : 0x3ffca55f  A7      : 0x00000015  A8      : 0x3ffcf2d8  A9      : 0x3ffcf360  
A10     : 0x3ffcf2d8  A11     : 0x0000fe02  A12     : 0x3ffca4cc  A13     : 0x3ffcf120  
A14     : 0x3ffca530  A15     : 0x3ffc3fec  SAR     : 0x00000004  EXCCAUSE: 0x0000001c  
EXCVADDR: 0x0000002c  LBEG    : 0x40090615  LEND    : 0x40090625  LCOUNT  : 0xfffffffa  


Backtrace: 0x40126f78:0x3ffca560 0x400d25bb:0x3ffca580 0x400d263e:0x3ffca5e0 0x400eb030:0x3ffca600 0x40093651:0x3ffca620

h2zero Nov 5, 2025
Maintainer

I've not seen that return code before, I'll have to look into that,. The crash is caused by your code trying to use a characteristic that wasn't found (nullptr).

h2zero · 2025-11-05T16:17:48Z

h2zero
Nov 5, 2025
Maintainer

it looks like you have some mismatched files, try deleting the lib and reinstalling

0 replies

JBHudston · 2025-11-05T21:41:47Z

JBHudston
Nov 5, 2025
Author

Hi Ryan, There's a received error response from the Amazon remote in the Samsung log that I posed at line 1506. Maybe provides a clue? I have no idea but I've attached the log if it helps. Regards, Jonathan

…

On Wed, Nov 5, 2025 at 9:24 PM Ryan Powell ***@***.***> wrote: I've not seen that return code before, I'll have to look into that,. The crash is caused by your code trying to use a characteristic that wasn't found (nullptr). — Reply to this email directly, view it on GitHub <#1050 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/A2FEVB5OLW6NRNX6XWWKTEL33JTJVAVCNFSM6AAAAACJO5CUEWVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTIOBYGUYTIMY> . You are receiving this because you were mentioned.Message ID: ***@***.***>

1 reply

h2zero Nov 5, 2025
Maintainer

That isn't the same issue sadly. The error you got comes from here:

NimBLE-Arduino/src/nimble/nimble/host/src/ble_gattc.c

Line 1589 in 7a4402f

rc = BLE_HS_EBADDATA;

JBHudston · 2025-11-05T21:55:21Z

JBHudston
Nov 5, 2025
Author

I've tried it with a cheap Amazon TV clone and it seems to be loping the discovery and removing the top characteristics from the top of the list: ``` D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 46 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 47 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 48 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 49 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 50 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 14 handle: -1 D NimBLERemoteCharacteristic: << Descriptor Discovery D NimBLERemoteCharacteristic: << retrieveDescriptors(): found 9 descriptors. D NimBLERemoteCharacteristic: >> retrieveDescriptors() for characteristic: 0x2a4d D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 45 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 46 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 47 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 48 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 49 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 50 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 14 handle: -1 D NimBLERemoteCharacteristic: << Descriptor Discovery D NimBLERemoteCharacteristic: << retrieveDescriptors(): found 6 descriptors. D NimBLERemoteCharacteristic: >> retrieveDescriptors() for characteristic: 0x2a4d D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 49 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 50 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 14 handle: -1 D NimBLERemoteCharacteristic: << Descriptor Discovery D NimBLERemoteCharacteristic: << retrieveDescriptors(): found 2 descriptors. D NimBLERemoteService: >> retrieveCharacteristics() D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 52 D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 55 D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 58 D NimBLERemoteService: Characteristic Discovery >> status: 0 handle: 61 D NimBLERemoteService: Characteristic Discovery >> status: 14 handle: -1 D NimBLERemoteService: << Characteristic Discovery D NimBLERemoteService: << retrieveCharacteristics() D NimBLERemoteCharacteristic: >> retrieveDescriptors() for characteristic: fe151501-5e8d-11e6-8b77-86f30ca893d3 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 54 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 55 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 56 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 3240 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 35703 D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 10 handle: -1 D NimBLERemoteCharacteristic: << Descriptor Discovery E NimBLERemoteCharacteristic: << retrieveDescriptors(): failed: rc=10 ```

2 replies

h2zero Nov 5, 2025
Maintainer

D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 3240

D NimBLERemoteCharacteristic: Descriptor Discovery >> status: 0 handle: 35703

These don't make any sense, the data is getting corrupted somewhere, the return code of 10 means the data is bad.

h2zero Nov 5, 2025
Maintainer

Need to do some custom logging in here, it's like the characteristic and service handles are messed up.

Uh oh!

Control ESP32 with BT Remote - Subscribe to Characteristic by Handle for notification of button presses #1050

Uh oh!

JBHudston Oct 17, 2025

Replies: 4 comments · 11 replies

Uh oh!

h2zero Oct 20, 2025 Maintainer

Uh oh!

h2zero Oct 29, 2025 Maintainer

Uh oh!

JBHudston Oct 29, 2025 Author

Uh oh!

JBHudston Nov 5, 2025 Author

Uh oh!

JBHudston Nov 5, 2025 Author

Uh oh!

h2zero Nov 5, 2025 Maintainer

Uh oh!

h2zero Nov 5, 2025 Maintainer

Uh oh!

JBHudston Nov 5, 2025 Author

Uh oh!

h2zero Nov 5, 2025 Maintainer

Uh oh!

Uh oh!

JBHudston Nov 5, 2025 Author

Uh oh!

Uh oh!

h2zero Nov 5, 2025 Maintainer

Uh oh!

h2zero Nov 5, 2025 Maintainer

JBHudston
Oct 17, 2025

Replies: 4 comments 11 replies

h2zero
Oct 20, 2025
Maintainer

h2zero Oct 29, 2025
Maintainer

JBHudston Oct 29, 2025
Author

JBHudston Nov 5, 2025
Author

JBHudston Nov 5, 2025
Author

h2zero Nov 5, 2025
Maintainer

h2zero
Nov 5, 2025
Maintainer

JBHudston
Nov 5, 2025
Author

h2zero Nov 5, 2025
Maintainer

JBHudston
Nov 5, 2025
Author

h2zero Nov 5, 2025
Maintainer

h2zero Nov 5, 2025
Maintainer