Ubertooth One

A purpose-built Bluetooth/BLE sniffer that follows a live connection across its frequency-hopping channels.

120€ Radio & RF

What it does

The Ubertooth One is an open-source USB platform built specifically for monitoring Bluetooth and Bluetooth Low Energy. Beyond capturing BLE advertisements the way a flashed nRF52840 dongle does, it can follow classic Bluetooth's frequency-hopping spread spectrum and lock onto a live connection, feeding both into Wireshark for GATT and ATT analysis.

Use cases

Sniff BLE advertisements and connections

Follow a device from its advertisement into an active connection and capture the full ATT exchange.

Follow classic Bluetooth frequency hopping

Lock onto a live piconet's hop pattern to capture traffic a fixed-channel radio would miss entirely.

Feed captures into Wireshark

Stream directly to Wireshark's btle/bthci dissectors for live GATT read/write inspection.

How you use it

ubertooth-btle covers BLE; ubertooth-rx covers classic Bluetooth discovery:

ubertooth-btle -f                       # follow BLE advertisements
ubertooth-btle -f -t <BD_ADDR>          # follow a live BLE connection by address
ubertooth-rx -z                         # discover classic Bluetooth piconets

Variants & pitfalls

Catch the connection early. Miss the initial CONNECT_IND and you lose the hop sequence derivation; start the capture before the pairing or connection begins.

Not a substitute for a wideband SDR. It is fixed to the Bluetooth/BLE band; for general spectrum survey reach for an RTL-SDR or HackRF instead.