Plain-language guides to Bluetooth Low Energy sniffing — what the tools actually capture,
how advertisements work on the air, and how to get useful data out of the devices around
you.
"Bluetooth sniffer" and "BLE sniffer" are used interchangeably, but Bluetooth is really two protocols. Here's what the terms mean, why almost every modern sniffer is a BLE sniffer, and what it takes to sniff Classic Bluetooth.
Bluetooth sniffing means passively capturing Bluetooth radio traffic that's already on the air. Here's how it works, the two very different things people mean by it, what each one needs, and the legal and ethical questions it raises.
Can the Flipper Zero sniff Bluetooth Low Energy? Here's what its BLE radio does out of the box, what community firmware adds, where it stops, and how it compares to a phone or a dedicated capture dongle.
The iOS version of BLE Sniffer is missing things the Android one has — no MAC addresses, no background scanning. Here's exactly what differs between the platforms, and why each gap is an Apple constraint, not a shortcut.
The same device shows up under a new Bluetooth address every few minutes, and scans fill with duplicates. Here's how BLE address randomization works, the four address types, how to read them, and how to track a device anyway.
RSSI is the only distance clue a BLE scan gives you, and it's a bad one. Here's the math that converts RSSI to meters, why the answer is routinely off by 2–3×, and how to use signal strength to actually find something.
A realistic method for finding lost Bluetooth headphones, earbuds, or a speaker with a BLE scanner — starting with the honest part: when a scan can help, when it physically cannot, and what to do in each case.
iOS can scan for Bluetooth LE devices, but it deliberately hides MAC addresses and restricts background scanning. Here's exactly what an iPhone BLE scanner can see, what it can't, and how it compares to Android.
A walkthrough for finding Bluetooth LE devices near you and tracking down where they physically are — reading RSSI honestly, the hot-and-cold sweep, body shielding, and handling devices that rotate their address.
If you think someone hid a tracker on you or your car, here's how to find it: the built-in phone alerts to try first, why a general BLE scanner catches what they miss, and how to physically locate the tag once you know it's there.
Seeing a mystery device in your Bluetooth list? Here's how to work out what it is from the clues in its advertisement — manufacturer, service UUIDs, appearance, address type — and how to physically find it if the payload doesn't say.
Every BLE device broadcasts advertisement packets in a defined format. Here's how advertising works — channels, intervals, PDU types — and how to decode a real advertisement payload byte by byte, including manufacturer-specific data.
A BLE sniffer captures the Bluetooth Low Energy signals broadcast by nearby devices. Here's what a Bluetooth sniffer actually does, what it can and can't see, and how to start sniffing with hardware you already own.
"Bluetooth packet sniffer" and "BLE scanner" get used interchangeably, but they capture different things. Here's what each one sees, when you need which, and why your phone can do one but not the other.
A practical rundown of Bluetooth Low Energy sniffer hardware — the nRF52840 dongle, Ubertooth One, Flipper Zero, and using your phone — with what each captures, what it costs, and when you actually need it.
A Bluetooth protocol analyzer decodes raw BLE packets into readable link-layer, L2CAP, and GATT layers. Here's how BLE's protocol stack fits together and which analyzer tools to use, from Wireshark to your phone.
You don't need a dongle to start sniffing Bluetooth Low Energy. Here's a step-by-step guide to scanning nearby BLE devices with an Android phone — reading advertisements, using a proximity radar, and exporting the data.