Is it possible to write a ble sniffer by using RADIO directly?

RE: Is it possible to write a ble sniffer by using RADIO directly?

Dmitry — Tue, 26 May 2020 09:08:41 GMT

I would suggest to look at sniffle as a start point.

RE: Is it possible to write a ble sniffer by using RADIO directly?

Tommy_Li — Tue, 26 May 2020 07:27:49 GMT

Thank you for your kindly reply. If i could reference nimble or zephyr, because i know they all have implemented LL layer of BLE.

RE: Is it possible to write a ble sniffer by using RADIO directly?

Dmitry — Tue, 26 May 2020 07:18:59 GMT

Hi,

it's a more complex task than you could think, but nothing is impossible 🙂 You need to implement a listener for advertisements, a scheduler for connection events, packet parser, handling for LL procedures like changing of connection parameters / channel map / phy, also both channel selection algoritms and many other things you'll find in Bluetooth Core specification. Then implement some way to pass a stream of packets to the host (probably using USB CDC ACM), and some UI (or merely a converter to pcapng) at host side.

A Volume 6 of Bluetooth Core Specification is a must-read if you dare.