Last November, the WCH BLE Analyzer Pro was introduced as an affordable USB Bluetooth Low Energy (BLE) sniffer and analyzer, priced at approximately $20. It was anticipated as a valuable tool for reverse engineering and debugging, although it initially had a limitation: the software was compatible only with Windows 7 to 11.
In a remarkable turn of events, the developer Xecaz undertook the effort to reverse-engineer the USB protocol that the device uses. This endeavor resulted in the creation of a Linux-compatible software utilizing libusb, which can output data in a standard pcap format compatible with tools like Wireshark. As Xecaz humorously noted, "WinChipHead forgot to ship a Linux driver. We forgot to ask permission."
The WCH BLE Analyzer Pro is equipped with three CH582F Bluetooth LE RISC-V microcontrollers along with a CH334 USB hub. It supports Bluetooth Low Energy versions 4.0, 4.2, and 5.0, and connects through a USB-C port.
The Linux driver for the BLE Analyzer Pro can be accessed on GitHub. The installation process is simple and involves a few straightforward commands:
git clone https://github.com/xecaz/BLE-Analyzer-pro-linux-capturecd BLE-Analyzer-pro-linux-capture/sudo apt install libusb-1.0-0-devmakesudo make installsudo udevadm control --reload-rules && sudo udevadm triggerFor usage, you can run the program without parameters to see available options:
./wch_captureThe usage details display options for capturing data, such as printing packets to the console or writing them to a pcap file. For instance, to capture and save output to a file, a user can execute:
sudo ./wch_capture -v -w capture.pcapOnce the capture process is complete, the generated file can be opened using Wireshark for analysis, with the tool simultaneously capturing traffic on channels 37, 38, and 39.
Additionally, Xecaz has mentioned that work on an Android application for the BLE Analyzer Pro is underway, and he is inviting testers for the app before its public release. The reverse-engineering process, including insights and challenges faced, has been documented in the "RE_PROCESS.md" file on GitHub for those interested in the details.
ChicagoVPS is your gateway to unparalleled hosting solutions. Our state-of-the-art datacenters and powerful network ensures lightning-fast speeds and uninterrupted connectivity for your websites and applications. Whether you’re a startup looking for scalable resources or an enterprise in need of enterprise-grade hosting, our range of plans and customizable solutions guarantee a perfect fit. Trust in ChicagoVPS to deliver excellence, combining unmatched reliability and top-tier support.
For Inquiries or to receive a personalized quote, please reach out to us through our contact form here or email us at sales@chicagovps.net.
