The reference active BR/EDR sniffer on commodity ESP32 hardware (~$4 to 10; ~590 stars, GPL-2.0). It patches the ESP32 ROM Bluetooth stack to dump baseband packets, BT header, channel, device role, FHS, ACL and LMP, over USB serial to a host Python tool (BTSnifferBREDR.py) with Scapy/Wireshark output. This is Bluetooth CLASSIC (BR/EDR), not BLE. It actively connects to the target, so authorised testing only.
The active BR/EDR sniffer developed during the BrakTooth research, described by its authors as the cheapest BR/EDR active sniffer they are aware of. Last commit 2023-05-10; an open issue reports the prebuilt firmware not booting on an ESP32-D0WD-V3 rev 3.1 board, cause unconfirmed. Source · checked 2026-09-28