Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: parse Microsoft "Swift Pair" MSD + possible improvement on CDP parsing #94

Open
XenoKovah opened this issue Aug 31, 2024 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@XenoKovah
Copy link

I happened upon this page which describes a different Microsoft MSD format ("Swift Pair") than the one Sniffle currently parses ("Connected Devices Platform"). It's quite interesting because it always includes a device name. It also sometimes includes a BTC BDADDR, which makes devices guaranteed uniquely identifiable even if they're using random private BLE BDADDRs. I think it'd be worth Sniffle parsing that.

And then when I was adding support for parsing the same CDP MSD type Sniffle currently parses, I noticed based on my collected data that if NearShareAuthPolicyPermissive is set, apparently the "Device Hash" is actually 2 unknown bytes followed by a device name. E.g. this is where things like default "LAPTOP-1234ABCD" or customized hostnames are advertised via ADV_NONCONN_IND. So that seems like a nice-to-have improvement of the existing MSD parsing.

@sultanqasim sultanqasim added the enhancement New feature or request label Sep 11, 2024
@sultanqasim sultanqasim self-assigned this Sep 11, 2024
@sultanqasim
Copy link
Collaborator

Nice find, I'll add parsing of that when I get a chance.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants