Making my own Bluetooth packet analyser

[Dr_GrEeN]

Hey guys

For my bluetooth projects I need a bluetooth packet analyzer that doesn't cost the earth :D. After looking at my options, I've decided to make my own.

Now I've been using my modded Fujitsu-Siemens dongle for a while now and the one thing I've noticed with this is that if you want to sniff good data, the master device has to be within one foot of the sniffer :( So I've decided to beef up on the antenna side of things.

The first thing is to get the parts :D Heres my shopping list.

1 x 12db Antenna £14.99
1 x 27dbm 500mW Amp £49.99
Cable £3.00
1 x Project box £3.00
1 x Fujitsu-Siemens dongle at £20
1 x Reverse sma connector £1.50

Total cost £84.48

I've ordered the dongle and the amp and the rest I already bought this afternoon with O'Reilly's Wireless Hacks. If I am successful I will post a guide. Maybe a video guide :D with my funny drgr33n mask lol

More info to follow

[tek911]

You doing the flash the firmware route from max moser's paper ?


Also, do you know if that linksys dongle is CSR chipset? I've been out of the bluetooth analyzer stuff for a little bit, do they ahve other chipsets you can flash?

[Dr_GrEeN]

Hey tek911

Just read your post on fpga and sounds very interesting :D

I've just found out I've been done !!! I was told by ebuyer that the 122 has on-module ram but it doesn't !!! It actually has a broadcom chipset :mad:

I've sent them back and I'm now going to go with another Fujitsu-Siemens dongle. It has the BC04-EXT chipset and I've used this before.

I'm told old linksys USBBT100 has a csr BC02-EXT chipset as does the dlink DBT-120.

I keep seeing broadcom, dell names poping up and the Origo BTD-1110 on googling things like "bluetooth dfu" etc.

I'm also trying to source a retailer for EZURiO's products but its really had to find out any info on any dongles :D. I've tried phoning and emailing loads of companies and got no good info. Most don't even know what the fu&* I'm talking about lol. Dlink told me that I was breaking the law but I think they thought I was modifying their firmware :D

http://www.ezurio.com/

Anyway I'm still hunting il let you know how I get on :D

[tek911]

Yeah, i went down the whole bluetooth analyzer path until after 3 different unsuccessful attempts at ordering actual CSR chipsetted devices, i put taht on the back burner. I might have to dust it off though.

[Dr_GrEeN]

Well I've owned a Fujitsu-Siemens dongle and that defo is the kiddie :D Mines on order but they are out of stock until april :( I'm going to add more stuff to blue-smash to pass the time I think:D

[Dr_GrEeN]

Hey guys

Just wanted to ask some advice about adding an sma connector to my dongle. Here are a couple of picts with what i'm going to attempt :D.

Let me know if I am doing anything wrong. From what I can see the internal antenna is the same as a wifi dongle but smaller.

http://img152.imageshack.us/img152/8839/drgr33n0020tc8.th.jpg (http://img152.imageshack.us/my.php?image=drgr33n0020tc8.jpg)

http://img253.imageshack.us/img253/9274/drgr33n0024zx0.th.jpg (http://img253.imageshack.us/my.php?image=drgr33n0024zx0.jpg)

[s1lang]

Completely off-topic mate.

But
You should change your username to Dr_Blue :)

[Dr_GrEeN]

Completely off-topic mate.

But
You should change your username to Dr_Blue

Hehehe there are other reasons I'm called Drgr33n :D One is I worked in a hydroponic shop for 5 years and I am a keen horticulturalist :D

Guess nobody knows or I'm doing it right :D ???

[archangel.amael]

Guess nobody knows or I'm doing it right :D ???

The cat was out of the bag long ago here bro. :D

[balding_parrot]

The cat was out of the bag long ago here bro. :DUnderstatement of the year :rolleyes:

[Dr_GrEeN]

I meant my pictures :D

[Barry]

I meant my pictures :D

The idea sounds right. Don't forget to cut the traces for the built in antenna.

[Dr_GrEeN]

Cheers barry for the advice :D That hirose sorta connector on the back makes this mod a lot easier phew :p

heres my new plan of action

http://img296.imageshack.us/img296/9884/drgr33n0020hd4.th.jpg (http://img296.imageshack.us/my.php?image=drgr33n0020hd4.jpg)

[Barry]

Cheers barry for the advice :D That hirose sorta connector on the back makes this mod a lot easier phew :p

heres my new plan of action

Yea that should work. If it doesn't then just solder the cut back together.

[Speedy]

Hi Dr Green,

Have a look here:

hxxp://xxx.pentest.co.uk/documents/bt_dongle_mod/bt_dongle_mod.html

[Dr_GrEeN]

Cheers barry

@ Speedy Cheers m8, I have read that article but if you look the antenna on that board is a sorta internal/external antenna if you know what I mean :D ;)

My dongles antenna is graphed onto the pcb.

I will have my dongles monday, the one in the picture is my dead one :D

EDIT

Dongles have took forever to turn up, they should be here tomorrow I hope !!! :D

[Dr_GrEeN]

Well I'm pleased to report my sniffer is working (I think :D ). I've cut through the onboard antenna and it still picks up connections at a distance.

I am waiting for my amp and antenna, so I'm just using a duck at the mo. But a defo Here's what I ordered.

http://cgi.ebay.co.uk/3in1-12dBi-WiFi-Antenna-6ft-RF-Cable-Amp-Booster-500mW_W0QQitemZ270121263736QQcmdZViewItem?hash=ite m270121263736

When I get a sunny day I'l post some results.