Re: About capture Bluetooth packets

[Guy Harris <guy () alum mit edu>]

On Jul 2, 2010, at 12:43 PM, nehemiah wrote:

> wireshark and tcpdump capture packets from network devices. bluetooth is
> more similar to a USB device.

...and both Wireshark and tcpdump can, at least on Linux, capture on both Bluetooth and USB if the machine on which 
you're capturing has:

        1) a sufficiently recent version of libpcap (1.0.0 or later, although, for USB, you probably want 1.1.0 or 
later) that was configured with USB and Bluetooth support - whether you have that is up to the makers of your Linux 
distribution, although you could try configuring and building libpcap yourself and either rebuilding 
tcpdump/Wireshark/whatever with it or building it and installing it as a replacement for the distribution's libpcap 
shared library);

        2) a Bluetooth or USB stack in the kernel that supports the capture mechanism used by libpcap.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.