This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I think I just answered my own question, but if I cannot capture Bluetooth traffic using Wireshark on a Windows laptop, I'm probably not going to be terribly successful capturing Bluetooth traffic using Wireshark on a Linux VM hosted on that same Windows laptop, am I?

Thanks, John

asked 16 Dec '15, 11:44

JohnG's gravatar image

JohnG
6112
accept rate: 0%


but if I cannot capture Bluetooth traffic using Wireshark on a Windows laptop, I'm probably not going to be terribly successful capturing Bluetooth traffic using Wireshark on a Linux VM hosted on that same Windows laptop, am I?

You might be.

If the virtual machine software provides a Bluetooth interface on the VM guest machine, using the host machine's Bluetooth adapter, and if the Linux recognizes that Bluetooth interface, you should be able to capture Bluetooth traffic between the Linux guest and other machines. However, you won't be able to capture Bluetooth traffic between the Windows host and other machines, and you won't be able to capture other Bluetooth traffic - traffic between two other machines - on the Linux guest.

If you want to passively capture third-party Bluetooth traffic, between two other machines, you'll need something such as Ubertooth software and a device that supports it, such as an Ubertooth One. Ubertooth might work on OS X, but doesn't appear to work on Windows, so you'll have to run it on your Linux guest, which will require that the virtual machine support connecting to the guest USB devices plugged into the host.

permanent link

answered 16 Dec '15, 17:16

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Thanks - I am attempting to debug the BT link between a device and a printer. Not being able to see if there is any traffic is rather hobbling. Thanks for the Ubertooth hint.

(17 Dec '15, 06:21) JohnG

If you have Standard USB Bluetooth dongle (or your laptop has Bluetooth pluged by internal/virtual USB) then you can try do that on Windows by USBPcap (Wireshark 2.0 or later.. or standalone USBPcap: http://desowin.org/usbpcap/).

(20 Dec '15, 09:45) Michał Łabędzki
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×154
×27
×23

question asked: 16 Dec '15, 11:44

question was seen: 2,161 times

last updated: 20 Dec '15, 09:45

p​o​w​e​r​e​d by O​S​Q​A