Transferring arbitrary data via Bluetooth Smart (BLE) with nRF51
Also, on the nRF51 you can indeed send arbitrary L2CAP data, although you cannot send arbitrary ATT or SMP packets, those 2 protocols are reserved by the stack. But you can select an unused L2CAP channel and, if you control both sides, send any data you want.