Wireshark-users: Re: [Wireshark-users] Bluetooth capture on Mac?

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 26 Sep 2014 09:49:25 -0700
On Sep 26, 2014, at 6:39 AM, "Paul Raine" <praine@xxxxxxxxxxxxxxxxx> wrote:

> On 25 Sep 2014, at 10:43:57 AM, Guy Harris <guy@xxxxxxxxxxxx> wrote:
> 
>> On Sep 25, 2014, at 6:35 AM, "Paul Raine" <praine@xxxxxxxxxxxxxxxxx> wrote:
>> 
>>> Is it possible to capture Bluetooth packets using Wireshark on Mac?
>>> I know this is possible on Linux, (but not windows), but what about OS-X?
>> 
>> Not with libpcap-based applications such as Wireshark.  Apple's PacketLogger
>> program can be used to capture Bluetooth traffic to and from the Mac, and
>> Wireshark can read its files, but the interfaces it uses to capture the
>> traffic are not, as far as I know, documented, so they're not easily
>> available to libpcap.
> 
> Oh, so no live capture, but I could use Wireshark to analyze the packets
> afterwards, right?

Yes - no live capture with Wireshark (or tcpdump or other libpcap-based application), but it *is* supported with PacketLogger, and Wireshark can read PacketLogger files.