Is it possible to write a ble sniffer by using RADIO directly?

[Tommy_Li]

Dear All:

           I want to learn the detail of the ble technology and i think the offical ble sniffer is very cool, but it is not open source, so i want to write a ble sniffer by using RAIDO directly.

           So please tell me how difficult it is to do that?

           Thanks.

[Dmitry]

Hi,

it's a more complex task than you could think, but nothing is impossible   You need to implement a listener for advertisements, a scheduler for connection events, packet parser, handling for LL procedures like changing of connection parameters / channel map / phy, also both channel selection algoritms and many other things you'll find in Bluetooth Core specification. Then implement some way to pass a stream of packets to the host (probably using USB CDC ACM), and some UI (or merely a converter to pcapng) at host side.

A Volume 6 of Bluetooth Core Specification is a must-read if you dare.

[Tommy_Li]

Thank you for your kindly reply. If i could reference nimble or zephyr, because i know they all  have implemented LL layer of BLE. 

[Dmitry]

I would suggest to look at sniffle as a start point.