greatscottgadgets / libbtbb Goto Github PK

A Bluetooth baseband decoding library

License: GNU General Public License v2.0

CMake 11.25% Shell 3.18% C 75.87% Tcl 0.11% Ruby 0.07% Makefile 1.40% Python 7.96% HTML 0.16%

libbtbb's Introduction

libbtbb

This is the Bluetooth baseband decoding library, forked from the GR-Bluetooth project. It can be used to extract Bluetooth packet and piconet information from Ubertooth devices as well as GR-Bluetooth/USRP.

This code is incomplete, it is still under active development. Patches and bug reports should be submitted to the bug tracker on GitHub: https://github.com/greatscottgadgets/libbtbb/issues

This software has been developed and tested on Linux, it should work on other platforms but this has yet to be tested.

Build Instructions

Libbtbb can be built and installed as follows:

$ mkdir build
$ cd build
$ cmake ..
$ make
$ sudo make install

This will install the library to /usr/local/lib and the headers to /usr/local/include, to install to different locations use:

$ cmake -DINSTALL_DIR=/path/to/install -DINCLUDE_DIR=/path/to/include ..

If you have previous versions of libbtbb, libubertooth or the Ubertooth tools installed, you can use the cleanup script to remove them:

$ sudo cmake/cleanup.sh -d

To list the installed files without removing them, use:

$ cmake/cleanup.sh

libbtbb's People

Contributors

Stargazers

Watchers

Forkers

krasin whiterocker idiom sudosublime rubund shujajamil lopessec carrychen hotelzululima troth feedcafe el-han chinnyannieb code4bones samyk danishkarim pabigot robotastic mark-one snakie mnhauke conjuringtricks ulfwetzker david1mdavis infojch dmalkiewicz88 decaun seanrivera tsvehagen sylvaindr sumeetchhawri drawnwren dinaline th1nk1ng janderso42 amit-chahar venkatarajasekhar cr1515b cmcmurrough syncharny vipinraj chenxi65535 yangchengwork ecoblockchain tomchothia nadusumilli-unomaha orgua tom-robbins rabbit090 ericyao2013 qidama universal-it-systems tanglexu demantz thisisfalcon zeningchen micolous modulexcite rgov ursmanojgit donfanning zhyh329 adarshdas2999 5l1v3r1 bryanperris ma5onic jamboyce cyb3rr0nn13 masterscott seroam mossmann mfkiwl brotherbus dazetsai tranzmatt israelccarvalho alchemycyberblaze bjamin99 glevkovich listout xiaoyao888888 barracuda156 gsingh93

libbtbb's Issues

[libbtbb-2015-10-R1] Wireshark plugin (now legacy-plugin) build failing.

In packet-btbb.c I needed to comment out line 259:
/* pinfo->private_data = &fake_acl_data; */

This allowed the plugin to build, but I have no idea what I may have broken in the process. It's preceded by a 'FIXME' and the struct packet_info has no member private_data.

Update version

In the set_release.cmake file, the file version is still set to 2018-12-R1
https://github.com/greatscottgadgets/libbtbb/blob/master/cmake/set_release.cmake

make - No module named distutils.core

Error when running the make command:

Consolidate compiler generated dependencies of target btbb
[ 88%] Built target btbb
[100%] Generating build/timestamp
/home/julian/libbtbb/build/python/pcaptools/setup.py:13: DeprecationWarning: The distutils package is deprecated and slated for removal in Python 3.12. Use setuptools or check PEP 632 for potential alternatives
from distutils.core import setup
Traceback (most recent call last):
File "/home/julian/libbtbb/build/python/pcaptools/setup.py", line 13, in
from distutils.core import setup
ModuleNotFoundError: No module named 'distutils.core'
make[2]: *** [python/pcaptools/CMakeFiles/pcapdump.dir/build.make:74: python/pcaptools/build/timestamp] Error 1
make[1]: *** [CMakeFiles/Makefile2:201: python/pcaptools/CMakeFiles/pcapdump.dir/all] Error 2
make: *** [Makefile:136: all] Error 2

trouble building on debian testing x64

Hi Guys, I'm having problems on a fresh debian-machine while following your instructions word by word. I tried 2014-R2 and the latest master and get the following output (below). My old Ubuntu 12.4 has no problems at all. have you got any idea how to fix this?

user@debian:~/tools/greatscott/libbtbb/build$ cmake ..
-- The C compiler identification is GNU 4.8.2
-- The CXX compiler identification is GNU 4.8.2
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working CXX compiler: /usr/bin/c++
-- Check for working CXX compiler: /usr/bin/c++ -- works
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.26")
-- Could NOT find LIBBTBB (missing: LIBBTBB_LIBRARIES)
FATAL Pcap include dirs cannot be found
FATALPcap library cannot be found
-- Looking for pcap_version
-- Looking for pcap_version - not found
-- Looking for pcap_open_dead
-- Looking for pcap_open_dead - not found
-- Looking for pcap_freecode
-- Looking for pcap_freecode - not found
-- Looking for pcap_breakloop
-- Looking for pcap_breakloop - not found
-- Looking for pcap_create
-- Looking for pcap_create - not found
-- Looking for pcap_datalink_name_to_val
-- Looking for pcap_datalink_name_to_val - not found
-- Looking for pcap_datalink_val_to_description
-- Looking for pcap_datalink_val_to_description - not found
-- Looking for pcap_datalink_val_to_name
-- Looking for pcap_datalink_val_to_name - not found
-- Looking for pcap_findalldevs
-- Looking for pcap_findalldevs - not found
-- Looking for pcap_free_datalinks
-- Looking for pcap_free_datalinks - not found
-- Looking for pcap_get_selectable_fd
-- Looking for pcap_get_selectable_fd - not found
-- Looking for pcap_lib_version
-- Looking for pcap_lib_version - not found
-- Looking for pcap_list_datalinks
-- Looking for pcap_list_datalinks - not found
-- Looking for pcap_set_datalink
-- Looking for pcap_set_datalink - not found
-- Looking for pcap_open
-- Looking for pcap_open - not found
-- Looking for pcap_findalldevs_ex
-- Looking for pcap_findalldevs_ex - not found
-- Looking for pcap_createsrcstr
-- Looking for pcap_createsrcstr - not found
-- Could NOT find PCAP (missing: PCAP_INCLUDE_DIRS PCAP_LIBRARIES)

Build error bluetooth_rxtx

Hi,

I am trying to build firmware manually because of this issue (greatscottgadgets/ubertooth#55) and I am getting following errors:

/usr/lib/gcc/arm-none-eabi/4.8.2/../../../arm-none-eabi/bin/ld: cannot find -lstdc++
/usr/lib/gcc/arm-none-eabi/4.8.2/../../../arm-none-eabi/bin/ld: cannot find -lsupc++
collect2: error: ld returned 1 exit status
make: *** [bluetooth_rxtx.elf] Error 1

Any suggestions?

Wireshark btbb plugin does not dissect latest file format

I've built libbtbb and ubertooth from git (352b420 and d09308f4) in order to be able to create pcaps directly from ubertooth without kismet-ubertooth. I've successfully saved several of the pcaps/pcapngs but upon openning them in wireshark they're just reported as WTAP_ENCAP = 161, which seems to be correctly interpretted as "Bluetooth BR/EDR Baseband RF (161)". However, there's no further dissection.

Opening the example pcap file works fine, and there are no errors, so I suspect the dissector is working fine, but is for an older file format (as mentioned in issue #9).
"Yes, those plugins are old. We need to mostly rewrite them for the new file format." (July 2014)

It's rather confusing that the package has been updated to work with wireshark-1.12, but will not read files generated by the latest version of the library itself. Could this please be documented if not actually fixed?

Using ubertooth, kismet and wireshark isuue

Hi,
I am using the ubertooth plugin for Kismet. When I open it with wireshark, I get only 14 byte ID field and no payload.

What seems to be the problem?

Conflict between libbtbb Wireshark plugins: btbb & btbredr

The btbb and btbredr Wireshark plugins available in libbtbb 2015-09-R2 both have the same full name, "Bluetooth Baseband", and short name, "BT Baseband". Therefore, if both are built and installed, Wireshark cannot be started as there is a duplicated protocol name:

"Err Duplicate protocol name "Bluetooth Baseband"! This might be caused by an inappropriate plugin or a development error."

The same applies to the Bluetooth Link Manager Protocol (LMP) provided by both plugins with the same name.

Which is the current and most recommended plugin, btbb or btbredr?

Should we avoid reusing the same names to be able to have both enabled in Wireshark?

wireshark plugins install

Hi,

I m trying to install on Kali 2016-01 the wireshark btbb and br/edr plugins, without success. I know that the directory passed to cmake differs and on mine its in the /usr/lib/x86_64-linux-gnu/wireshark/plugins/2.0.4

however if i run cmake -DCMAKE_INSTALL_LIBDIR=/usr/lib/x86_64-linux-gnu/wireshark/plugins/2.0.4 ..

this is the output:

root@kali:~/libbtbb-2015-10-R1/wireshark/plugins/btbredr/build# make
[ 20%] Generating plugin.c
Scanning dependencies of target btbredr
[ 40%] Building C object CMakeFiles/btbredr.dir/plugin.c.o
[ 60%] Building C object CMakeFiles/btbredr.dir/packet-btbredr.c.o
In file included from /usr/include/wireshark/epan/packet.h:26:0,
from /root/libbtbb-2015-10-R1/wireshark/plugins/btbredr/packet-btbredr.c:31:
/root/libbtbb-2015-10-R1/wireshark/plugins/btbredr/packet-btbredr.c: In function ‘dissect_payload_header1’:
/root/libbtbb-2015-10-R1/wireshark/plugins/btbredr/packet-btbredr.c:179:19: warning: implicit declaration of function ‘tvb_length_remaining’ [-Wimplicit-function-declaration]
DISSECTOR_ASSERT(tvb_length_remaining(tvb, offset) >= 1);
^
/usr/include/wireshark/epan/proto.h:165:13: note: in definition of macro ‘DISSECTOR_ASSERT’
((void) ((expression) ? (void)0 :
^
/root/libbtbb-2015-10-R1/wireshark/plugins/btbredr/packet-btbredr.c: In function ‘dissect_dm1’:
/root/libbtbb-2015-10-R1/wireshark/plugins/btbredr/packet-btbredr.c:289:9: error: ‘packet_info {aka struct _packet_info}’ has no member named ‘private_data’
pinfo->private_data = &fake_acl_data;
^
/root/libbtbb-2015-10-R1/wireshark/plugins/btbredr/packet-btbredr.c: In function ‘dissect_btbredr’:
/root/libbtbb-2015-10-R1/wireshark/plugins/btbredr/packet-btbredr.c:317:6: warning: implicit declaration of function ‘tvb_length’ [-Wimplicit-function-declaration]
if (tvb_length(tvb) > 0 && tvb_length(tvb) < 9)
^
CMakeFiles/btbredr.dir/build.make:93: recipe for target 'CMakeFiles/btbredr.dir/packet-btbredr.c.o' failed
make[2]: *** [CMakeFiles/btbredr.dir/packet-btbredr.c.o] Error 1
CMakeFiles/Makefile2:67: recipe for target 'CMakeFiles/btbredr.dir/all' failed
make[1]: *** [CMakeFiles/btbredr.dir/all] Error 2
Makefile:127: recipe for target 'all' failed
make: *** [all] Error 2

Any guidance would be appreciated.

Wireshark Help

This is not so much an issue as a question because i'm fairly new to this, but its possible iv done something wrong.

I was following the instruction on gethub to capure BLE with Wireshark. https://github.com/greatscottgadgets/ubertooth/wiki/Capturing-BLE-in-Wireshark

But for some reason I only see a protocol for PPI ?
I noticed in the command window it says "Control message unsupported", could that be the problem ?
If so how can I fix it?

libpcap build error on OS X Yosemite (10.10.2)

In file included from .../libbtbb/lib/src/pcap.c:25:
.../libbtbb/lib/src/pcap-common.h:28:10: fatal error:
      'pcap/bluetooth.h' file not found
#include <pcap/bluetooth.h>
         ^
1 error generated.

Wireshark Dissector compilation Error on Ubuntu

I have a wireshark plugin code which compiles and generates .so files perfectly under Ubuntu 16. This dissector was written for wireshark 1.6 and the plugin runs perfectly under wireshark 1.6.

However when I try to use this plugin for wireshark 2(or any wireshark version higher than 1.6) following errors show -

Couldn't load module /home/th89ct/.config/wireshark/plugins/plugin-1_0_0.so: /home/th89ct/.config/wireshark/plugins/plugin-1_0_0.so: undefined symbol: tvb_length

Couldn't load module /home/th89ct/.config/wireshark/plugins/plugin--1_0_0.so: /home/th89ct/.config/wireshark/plugins/plugin--1_0_0.so: undefined symbol: check_col

so I wanted to edit the code by replacing the methods - as after googling I've found that these methods do not belong to the new wireshark API.

but the problem is every time I edit the code - even by only putting a space in a blank space - following error appears -

gcc -c -DHAVE_CONFIG_H -I/usr/include/wireshark -I/usr/include/glib-2.0 -I/usr/lib/i386-linux-gnu/glib-2.0/include -DINET6 -D_U=attribute((unused)) -Wall -Wpointer-arith -g -DXTHREADS -D_REENTRANT -DXUSE_MTSAFE_API -fPIC -DPIC packet-ife.c -o packet-ife.o packet-ife.c:105:23: fatal error: epan/emem.h: No such file or directory #include ^ compilation terminated. Makefile.linux:28: recipe for target 'packet-ife.o' failed make: _* [packet-ife.o] Error 1

what should I do? I am in bad need for help. I have no idea what to do!!!! Thanks in advance

Wireshark plugins do not work in 1.12 due to check_col()

Wireshark 1.12 removes the long-deprecated check_col() function. All Wireshark plugins included with libbtbb will no longer function with this version of Wireshark. It is worth noting that the only necessary plugins for 1.12 are btbb and btlmp.

BT LE capture interface

Hi,

I've just installed your wireshark plugin. I'm on Ubuntu 12.04 with wireshark 1.6. So build libraries are copied under /usr/lib/wireshark/libwireshark1/plugins
I'm using a USB BT LE dongle. But under wireshark no bluetooth capture interfaces are present.
Is your plugin compatible with Wireshark 1.6?
Have you faced some compatibility issues with some BT LE USB dongles?

I've compiled and installed wireshark 1.10.6 https://scottlinux.com/2013/06/07/how-to-install-the-latest-wireshark-from-source-on-debian-or-ubuntu-linux/ and I have same issue.

Regards.

Generic TI CC2540 support ?

Description mentions support for HackRF and USRP

Is the widely available sub 10$ TI CC2540 /1 based usb dongle supported ?

(If yes, which firmware is recommended ?)

Thanks

btbb_decode_payload in bluetooth_packet.c

I am tracing through the lib and stumbled on this found in the btbb_decode_payload function found in bluetooth_packet.c:

    case PACKET_TYPE_EV5:
        /* assuming EV5 but could be 3-EV5 */
        rv = EV5(pkt->clock, pkt);
    case PACKET_TYPE_DM5:
        /* assuming DM5 but could be 2-DH5 */
        rv = DM(pkt->clock, pkt);
        break;

Should there be a break after rv = EV5(pkt->clock, pkt);?

Just wondering.

Thanks,
John Montgomery

Request to update README with build instructions

Hello,

I'm building libbtbb on Kali , and noticed despite the instructions given here :

https://github.com/greatscottgadgets/ubertooth/wiki/Build-Guide

I am still not getting one pre-requisite downloaded/installed. Namely, libpcap-dev .

If it's okay, perhaps we can start a build-requirements section in this github's README.md ?

Install libbtbb issue

fatal: Not a git repository (or any of the parent directories): .git
FATAL Pcap include dirs cannot be found
FATALPcap library cannot be found
-- Looking for pcap_version
-- Looking for pcap_version - not found
-- Looking for pcap_open_dead
-- Looking for pcap_open_dead - not found
-- Looking for pcap_freecode
-- Looking for pcap_freecode - not found
-- Looking for pcap_breakloop
-- Looking for pcap_breakloop - not found
-- Looking for pcap_create
-- Looking for pcap_create - not found
-- Looking for pcap_datalink_name_to_val
-- Looking for pcap_datalink_name_to_val - not found
-- Looking for pcap_datalink_val_to_description
-- Looking for pcap_datalink_val_to_description - not found
-- Looking for pcap_datalink_val_to_name
-- Looking for pcap_datalink_val_to_name - not found
-- Looking for pcap_findalldevs
-- Looking for pcap_findalldevs - not found
-- Looking for pcap_free_datalinks
-- Looking for pcap_free_datalinks - not found
-- Looking for pcap_get_selectable_fd
-- Looking for pcap_get_selectable_fd - not found
-- Looking for pcap_lib_version
-- Looking for pcap_lib_version - not found
-- Looking for pcap_list_datalinks
-- Looking for pcap_list_datalinks - not found
-- Looking for pcap_set_datalink
-- Looking for pcap_set_datalink - not found
-- Looking for pcap_open
-- Looking for pcap_open - not found
-- Looking for pcap_findalldevs_ex
-- Looking for pcap_findalldevs_ex - not found
-- Looking for pcap_createsrcstr
-- Looking for pcap_createsrcstr - not found
-- Could NOT find PCAP (missing: PCAP_INCLUDE_DIRS PCAP_LIBRARIES)

Building wireshark/plugins/btbb on OSX

I've been working on building libbtbb under OSX and I succeeded with the checkout from master branch with a minor modification which makes the building steps look like this:

$ mkdir build
$ cd build
$ wget http://www.tcpdump.org/release/libpcap-1.6.2.tar.gz
$ tar zxvf libpcap-1.6.2.tar.gz
$ cmake -DPCAP_INCLUDE_DIR=`pwd`/libpcap-1.6.2 ..
$ make
$ make install

Encouraged by my probably first ever success in making something with makefiles work i went to the next step from Ubertooth build guide, and that's Wireshark step.
After I've figured out where Wireshark 1.12.3 has it's libraries I've downloaded it's sources and adapted the OSX build instructions to look like this:

wget https://1.eu.dl.wireshark.org/src/wireshark-1.12.3.tar.bz2
tar zxvf wireshark-1.12.3.tar.bz2 
mkdir wireshark
cd wireshark
ln -s ../wireshark-1.12.3/packaging/macosx/native-gtk/config.h .
cd ..
cmake -DWIRESHARK_INCLUDE_DIRS="`pwd`;`pwd`/wireshark-1.12.3" -DWIRESHARK_LIBRARIES=/Applications/Wireshark.app/Contents/Resources/lib/ ..

Output from cmake looks like this (I've added one message for debugging):

$ cmake -DWIRESHARK_INCLUDE_DIRS="`pwd`;`pwd`/wireshark-1.12.3" -DWIRESHARK_LIBRARIES=/Applications/Wireshark.app/Contents/Resources/lib/ ..
-- The C compiler identification is AppleClang 6.0.0.6000054
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Plugin will be installed in: ~/.wireshark/plugins
-- Found PkgConfig: /usr/local/bin/pkg-config (found version "0.28") 
-- checking for one of the modules 'glib-2.0>=2.4.0'
-- Found GLib2: glib-2.0;intl /usr/local/Cellar/glib/2.42.0/include/glib-2.0;/usr/local/Cellar/glib/2.42.0/lib/glib-2.0/include;/usr/local/opt/gettext/include
-- Looking for include file glib/gregex.h
-- Looking for include file glib/gregex.h - not found
-- Looking for include file glib/gchecksum.h
-- Looking for include file glib/gchecksum.h - not found
-- WIRESHARK_INCLUDE_DIRS = /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build;/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3
-- Configuring done
-- Generating done
-- Build files have been written to: /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build

Now calling make is the place I've got stuck at. For the most of the time I've had problems with inclusion paths but after this got resolved (with the nasty local wireshark directory + symlink to config.h) but after that I've started getting errors which look more like the btbb plugin is supposed to be built against different version of Wireshark headers:

$ make
Scanning dependencies of target btbb
[ 25%] Building C object CMakeFiles/btbb.dir/plugin.c.o
[ 50%] Building C object CMakeFiles/btbb.dir/packet-btbb.c.o
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c:32:
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/packet.h:26:
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/proto.h:41:
/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/../lib/clang/6.0/include/varargs.h:25:4: error: "Please use <stdarg.h> instead of <varargs.h>"
  #error "Please use <stdarg.h> instead of <varargs.h>"
   ^
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c:32:
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/packet.h:26:
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/proto.h:44:
In file included from /usr/local/Cellar/glib/2.42.0/include/glib-2.0/glib.h:30:
In file included from /usr/local/Cellar/glib/2.42.0/include/glib-2.0/glib/galloca.h:32:
In file included from /usr/local/Cellar/glib/2.42.0/include/glib-2.0/glib/gtypes.h:32:
/usr/local/Cellar/glib/2.42.0/lib/glib-2.0/include/glibconfig.h:103:9: warning: 'GLIB_MINOR_VERSION' macro redefined
#define GLIB_MINOR_VERSION 42
        ^
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark/config.h:50:9: note: previous definition is here
#define GLIB_MINOR_VERSION 12
        ^
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c:32:
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/packet.h:26:
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/proto.h:44:
In file included from /usr/local/Cellar/glib/2.42.0/include/glib-2.0/glib.h:30:
In file included from /usr/local/Cellar/glib/2.42.0/include/glib-2.0/glib/galloca.h:32:
In file included from /usr/local/Cellar/glib/2.42.0/include/glib-2.0/glib/gtypes.h:32:
/usr/local/Cellar/glib/2.42.0/lib/glib-2.0/include/glibconfig.h:104:9: warning: 'GLIB_MICRO_VERSION' macro redefined
#define GLIB_MICRO_VERSION 0
        ^
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark/config.h:47:9: note: previous definition is here
#define GLIB_MICRO_VERSION 9
        ^
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c:32:
In file included from /Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/packet.h:26:
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/proto.h:113:15: error: unknown type name 'WS_MSVC_NORETURN'
WS_DLL_PUBLIC WS_MSVC_NORETURN void proto_report_dissector_bug(const char *message) G_GNUC_NORETURN;
              ^
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/proto.h:113:32: error: expected identifier or '('
WS_DLL_PUBLIC WS_MSVC_NORETURN void proto_report_dissector_bug(const char *message) G_GNUC_NORETURN;
                               ^
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c:158:2: warning: implicit declaration of function 'proto_report_dissector_bug' is invalid in C99 [-Wimplicit-function-declaration]
        DISSECTOR_ASSERT(tvb_length_remaining(tvb, offset) >= 1);
        ^
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/proto.h:142:4: note: expanded from macro 'DISSECTOR_ASSERT'
   __DISSECTOR_ASSERT (expression, __FILE__, __LINE__))) \
   ^
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/proto.h:180:4: note: expanded from macro '__DISSECTOR_ASSERT'
  (REPORT_DISSECTOR_BUG( \
   ^
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/build/wireshark-1.12.3/epan/proto.h:116:2: note: expanded from macro 'REPORT_DISSECTOR_BUG'
        proto_report_dissector_bug(message)
        ^
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c:277:78: error: expected ')'
dissect_btbb(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_)
                                                                             ^
/Users/pb/tmp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c:277:13: note: to match this '('
dissect_btbb(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_)
            ^
3 warnings and 4 errors generated.
make[2]: *** [CMakeFiles/btbb.dir/packet-btbb.c.o] Error 1
make[1]: *** [CMakeFiles/btbb.dir/all] Error 2
make: *** [all] Error 2

I've tried different sources, even ones from apt-get repository (after unpacking with ar -x libwireshark-dev_1.8.2-5wheezy14_ia64.deb, there's a tar zxvf data.tar.gz file which contains ./usr/include/wireshark files which are needed). None of the approaches work but I can't really understand what am I doing wrong?

BDADDR bytesapped in wireshark

ubertooth-btle displays BDADDR correctly but when the pcap is opened in Wireshark, the fields are byteswapped.

I double checked against the OUI database and confirmed that the wireshark plugin gets this wrong. Unfortunately, I am not expert enough in wireshark dissectors coding to be able to provide a patch.

The list of bluetooth companies identifiers in file companies.c is out of date

Last company identifier in source file "companies.c" is 1037, but today (02/14/2022) the last identifier is 2851.

I made a new companies.c source file with an up to date list of identifiers. I can give the file to whoever is responsible of the companies.c file.

You can get the last list of companies identifiers on the bluetooth web site.

Wireshark plugin and alignment of the hf_register_info array.

With Wireshark 2.0.3, I've found that the plugin won't load (segfault on startup) due to a misalignment of the hf_register_info array-of-structs.

void proto_register_field_array(const int parent, hf_register_info *hf, const int num_records)
This function in Wireshark expects the data to be packed into 80-byte structures. I've checked with GDB and sizeof(hf_register_info) evaluates to 80. Relevant line is proto.c:5732.

My btbb.so plugin is providing 88-byte structs (at least the first two are). I believe the int id and int parent, initialized by the HFILL macro, need to be 32-bit. Maybe there is a compiler flag needed to prevent the padding?

3.19.0-59-generic 14.04.1-Ubuntu x86_64 GNU/Linux, wireshark-2.0.3

Make a new build...

The last build instructions you guy's completed was 2 and a half years ago. This build has been a pain in the __________. Also, why not put up some type of tutorial on using the product and libraries? That would be really useful. Thanks

pkg-config file is broken when CMAKE_INSTALL_{INCLUDE,LIB}DIR is absolute

As per title: lib/libbtbb.pc.in has

prefix=@CMAKE_INSTALL_PREFIX@
exec_prefix=${prefix}
libdir=${prefix}/@CMAKE_INSTALL_LIBDIR@
includedir=${prefix}/@CMAKE_INSTALL_INCLUDEDIR@

and so can’t handle absolute paths in CMAKE_INSTALL_{INCLUDE,LIB}DIR. This leads to broken .pc files on NixOS in particular.

See “Concatenating paths when building pkg-config files” for a thorough discussion of the problem and a suggested fix, or KDE’s extra-cmake-modules for a simpler approach.

Kismet pcapbtbb file only contains 14 byte packets

Hi,

I believe i have set everything up the way i should with kismet, ubertooth, libbtbb and wireshark.
I followed tutorials and installed kismet-2013-03-R1b, ubertooth-2015-10-R1 and libbtbb-2015-10-R1.

However when i read the pcapbtbb output file with wireshark, it only contains 14 byte longs packets with no destination. I read in previous issues that the lack of destination address is not unnusual because the packets don't always contain it. But i can't seem to find anything that helps me with the issue of not finding any information in the packets or that they are 14 bytes long.

Here is a picture of the file opened in wireshark.
(https://cloud.githubusercontent.com/assets/17140356/13199028/79d8f548-d819-11e5-88d1-ff6fffb70ed7.png)

I tried to send text between 2 devices and even tried to send music to a bluetooth headset, with the thought that a text message would be send to quickly and the ubertooth wouldn't have enough time to sniff it. But that didn't show any different result

Does anyone know how to help me with this?

Remove dependency on libpcap

We rely on libpcap to open a file and have some values declared in the header, the rest of it is not used for monitoring BT traffic and it's a problem for us on Windows anyway. Let's remove it.

I believe that @mikeryan has already started on this.

BTLE Time Stamp Issue

I'm seeing an issue with time stamps when doing BTLE captures on the Ubertooth One.
I see differences within just a few minutes of the capture running, and when I let it run for days, it gains days in the time stamp. For example I started a capture on 2/24/16 22:30:36 and stopped it at 2/27/2016 18:50:32. The last packet captured is time stamped 2/29/16 03:12:11. So roughly 33+ hours ahead on time.
System details:
RaspberryPi2
Kali Linux (kali-2.1-rpi2)
Ubertooth One, Firmware Revision 2015-10-R1

Running the capture using the following commands, both displaying the same timestamp problem,
ubertooth-btle -f -c filename.pcpap
ubertooth-btle -f -q filename.pcpap

cannot build from git with odd error

�[32;01m * �[39;49;00mPackage:    net-libs/libbtbb-9999
�[32;01m * �[39;49;00mRepository: maintainer-zero
�[32;01m * �[39;49;00mMaintainer: [email protected]
�[32;01m * �[39;49;00mUSE:        abi_x86_64 amd64 elibc_glibc kernel_linux pcap userland_GNU wireshark-plugins
�[32;01m * �[39;49;00mFEATURES:   preserve-libs sandbox userpriv usersandbox
>>> Unpacking source...
 �[32;01m*�[0m Fetching �[1mhttps://github.com/greatscottgadgets/libbtbb.git�[22m ...
git fetch https://github.com/greatscottgadgets/libbtbb.git +HEAD:refs/git-r3/HEAD
git symbolic-ref refs/git-r3/net-libs/libbtbb/0/__main__ refs/heads/master
 �[32;01m*�[0m Checking out �[1mhttps://github.com/greatscottgadgets/libbtbb.git�[22m to �[1m/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999�[22m ...
git checkout --quiet master
GIT update -->
   repository:               https://github.com/greatscottgadgets/libbtbb.git
   at the commit:            389f0c690cd5e59bd0496ff06fec40711e2b0754
>>> Source unpacked in /var/tmp/portage/net-libs/libbtbb-9999/work
>>> Preparing source in /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999 ...
>>> Source prepared.
>>> Configuring source in /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999 ...
>>> Working in BUILD_DIR: "/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build"
cmake --no-warn-unused-cli -C /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/gentoo_common_config.cmake -G Unix Makefiles -DCMAKE_INSTALL_PREFIX=/usr -DDISABLE_PYTHON=true -DPACKAGE_MANAGER=true -DPCAPDUMP=ON -DUSE_PCAP=ON -DCMAKE_BUILD_TYPE=Gentoo -DCMAKE_INSTALL_DO_STRIP=OFF -DCMAKE_USER_MAKE_RULES_OVERRIDE=/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/gentoo_rules.cmake -DCMAKE_TOOLCHAIN_FILE=/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/gentoo_toolchain.cmake  /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999
Not searching for unused variables given on the command line.
loading initial cache file /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/gentoo_common_config.cmake
-- The C compiler identification is GNU 4.8.4
-- The CXX compiler identification is GNU 4.8.4
-- Check for working C compiler: /usr/bin/x86_64-pc-linux-gnu-gcc
-- Check for working C compiler: /usr/bin/x86_64-pc-linux-gnu-gcc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Detecting C compile features
-- Detecting C compile features - done
-- Check for working CXX compiler: /usr/bin/x86_64-pc-linux-gnu-g++
-- Check for working CXX compiler: /usr/bin/x86_64-pc-linux-gnu-g++ -- works
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Detecting CXX compile features
-- Detecting CXX compile features - done
-- Pcap include dirs set to /usr/include
-- Pcap library set to  /usr/lib64/libpcap.so
-- Looking for pcap_version
-- Looking for pcap_version - found
-- Looking for pcap_open_dead
-- Looking for pcap_open_dead - found
-- Looking for pcap_freecode
-- Looking for pcap_freecode - found
-- Looking for pcap_breakloop
-- Looking for pcap_breakloop - found
-- Looking for pcap_create
-- Looking for pcap_create - found
-- Looking for pcap_datalink_name_to_val
-- Looking for pcap_datalink_name_to_val - found
-- Looking for pcap_datalink_val_to_description
-- Looking for pcap_datalink_val_to_description - found
-- Looking for pcap_datalink_val_to_name
-- Looking for pcap_datalink_val_to_name - found
-- Looking for pcap_findalldevs
-- Looking for pcap_findalldevs - found
-- Looking for pcap_free_datalinks
-- Looking for pcap_free_datalinks - found
-- Looking for pcap_get_selectable_fd
-- Looking for pcap_get_selectable_fd - found
-- Looking for pcap_lib_version
-- Looking for pcap_lib_version - found
-- Looking for pcap_list_datalinks
-- Looking for pcap_list_datalinks - found
-- Looking for pcap_set_datalink
-- Looking for pcap_set_datalink - found
-- Looking for pcap_open
-- Looking for pcap_open - not found
-- Looking for pcap_findalldevs_ex
-- Looking for pcap_findalldevs_ex - not found
-- Looking for pcap_createsrcstr
-- Looking for pcap_createsrcstr - not found
-- Found PCAP: /usr/include  
-- <<< Gentoo configuration >>>
Build type      Gentoo
Install path    /usr
Compiler flags:
C               -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native
C++             -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native 
Linker flags:
Executable       -Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu
Module           -Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu
Shared           -Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu

-- Configuring done
-- Generating done
-- Build files have been written to: /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build
>>> Working in BUILD_DIR: "/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build"
cmake --no-warn-unused-cli -C /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/gentoo_common_config.cmake -G Unix Makefiles -DCMAKE_INSTALL_PREFIX=/usr -DCMAKE_INSTALL_LIBDIR=/usr/lib64/wireshark/plugins/99999999 -DCMAKE_BUILD_TYPE=Gentoo -DCMAKE_INSTALL_DO_STRIP=OFF -DCMAKE_USER_MAKE_RULES_OVERRIDE=/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/gentoo_rules.cmake -DCMAKE_TOOLCHAIN_FILE=/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/gentoo_toolchain.cmake  /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb
Not searching for unused variables given on the command line.
loading initial cache file /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/gentoo_common_config.cmake
-- The C compiler identification is GNU 4.8.4
-- Check for working C compiler: /usr/bin/x86_64-pc-linux-gnu-gcc
-- Check for working C compiler: /usr/bin/x86_64-pc-linux-gnu-gcc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Detecting C compile features
-- Detecting C compile features - done
-- Plugin will be installed in: /usr/lib64/wireshark/plugins/99999999
-- Found PkgConfig: /usr/bin/x86_64-pc-linux-gnu-pkg-config (found version "0.28") 
-- checking for one of the modules 'glib-2.0>=2.4.0'
-- Found GLib2: glib-2.0 /usr/include/glib-2.0;/usr/lib64/glib-2.0/include
-- Looking for include file glib/gregex.h
-- Looking for include file glib/gregex.h - not found
-- Looking for include file glib/gchecksum.h
-- Looking for include file glib/gchecksum.h - not found
-- <<< Gentoo configuration >>>
Build type      Gentoo
Install path    /usr
Compiler flags:
C               -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native 
C++             
Linker flags:
Executable       -Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu
Module           -Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu
Shared           -Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu

-- Configuring done
-- Generating done
-- Build files have been written to: /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build
>>> Source configured.

>>> Compiling source in /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999 ...
>>> Working in BUILD_DIR: "/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build"
make -j1 VERBOSE=1 
/usr/bin/cmake -H/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999 -B/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build --check-build-system CMakeFiles/Makefile.cmake 0
/usr/bin/cmake -E cmake_progress_start /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles/progress.marks
make -f CMakeFiles/Makefile2 all
make[1]: Entering directory '/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build'
make -f lib/src/CMakeFiles/btbb.dir/build.make lib/src/CMakeFiles/btbb.dir/depend
make[2]: Entering directory '/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build'
cd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build && /usr/bin/cmake -E cmake_depends "Unix Makefiles" /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999 /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/lib/src /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src/CMakeFiles/btbb.dir/DependInfo.cmake --color=
Dependee "/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src/CMakeFiles/btbb.dir/DependInfo.cmake" is newer than depender "/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src/CMakeFiles/btbb.dir/depend.internal".
Dependee "/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src/CMakeFiles/CMakeDirectoryInformation.cmake" is newer than depender "/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src/CMakeFiles/btbb.dir/depend.internal".
�[35m�[1mScanning dependencies of target btbb
�[0mmake[2]: Leaving directory '/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build'
make -f lib/src/CMakeFiles/btbb.dir/build.make lib/src/CMakeFiles/btbb.dir/build
make[2]: Entering directory '/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build'
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles 1
[ 14%] �[32mBuilding C object lib/src/CMakeFiles/btbb.dir/bluetooth_packet.c.o
�[0mcd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src && /usr/bin/x86_64-pc-linux-gnu-gcc  -DENABLE_PCAP -DRELEASE=\"389f0c6\" -DVERSION=\"0.3\" -Dbtbb_EXPORTS  -DNDEBUG -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native -fPIC   -o CMakeFiles/btbb.dir/bluetooth_packet.c.o -c /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/lib/src/bluetooth_packet.c
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles 2
[ 28%] �[32mBuilding C object lib/src/CMakeFiles/btbb.dir/bluetooth_piconet.c.o
�[0mcd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src && /usr/bin/x86_64-pc-linux-gnu-gcc  -DENABLE_PCAP -DRELEASE=\"389f0c6\" -DVERSION=\"0.3\" -Dbtbb_EXPORTS  -DNDEBUG -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native -fPIC   -o CMakeFiles/btbb.dir/bluetooth_piconet.c.o -c /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/lib/src/bluetooth_piconet.c
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles 3
[ 42%] �[32mBuilding C object lib/src/CMakeFiles/btbb.dir/bluetooth_le_packet.c.o
�[0mcd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src && /usr/bin/x86_64-pc-linux-gnu-gcc  -DENABLE_PCAP -DRELEASE=\"389f0c6\" -DVERSION=\"0.3\" -Dbtbb_EXPORTS  -DNDEBUG -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native -fPIC   -o CMakeFiles/btbb.dir/bluetooth_le_packet.c.o -c /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/lib/src/bluetooth_le_packet.c
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles 4
[ 57%] �[32mBuilding C object lib/src/CMakeFiles/btbb.dir/pcap.c.o
�[0mcd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src && /usr/bin/x86_64-pc-linux-gnu-gcc  -DENABLE_PCAP -DRELEASE=\"389f0c6\" -DVERSION=\"0.3\" -Dbtbb_EXPORTS  -DNDEBUG -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native -fPIC   -o CMakeFiles/btbb.dir/pcap.c.o -c /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/lib/src/pcap.c
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles 5
[ 71%] �[32mBuilding C object lib/src/CMakeFiles/btbb.dir/pcapng.c.o
�[0mcd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src && /usr/bin/x86_64-pc-linux-gnu-gcc  -DENABLE_PCAP -DRELEASE=\"389f0c6\" -DVERSION=\"0.3\" -Dbtbb_EXPORTS  -DNDEBUG -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native -fPIC   -o CMakeFiles/btbb.dir/pcapng.c.o -c /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/lib/src/pcapng.c
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles 6
[ 85%] �[32mBuilding C object lib/src/CMakeFiles/btbb.dir/pcapng-bt.c.o
�[0mcd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src && /usr/bin/x86_64-pc-linux-gnu-gcc  -DENABLE_PCAP -DRELEASE=\"389f0c6\" -DVERSION=\"0.3\" -Dbtbb_EXPORTS  -DNDEBUG -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native -fPIC   -o CMakeFiles/btbb.dir/pcapng-bt.c.o -c /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/lib/src/pcapng-bt.c
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles 7
[100%] �[32mBuilding C object lib/src/CMakeFiles/btbb.dir/version.c.o
�[0mcd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src && /usr/bin/x86_64-pc-linux-gnu-gcc  -DENABLE_PCAP -DRELEASE=\"389f0c6\" -DVERSION=\"0.3\" -Dbtbb_EXPORTS  -DNDEBUG -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native -fPIC   -o CMakeFiles/btbb.dir/version.c.o -c /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src/version.c
�[31m�[1mLinking C shared library libbtbb.so
�[0mcd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src && /usr/bin/cmake -E cmake_link_script CMakeFiles/btbb.dir/link.txt --verbose=1
/usr/bin/x86_64-pc-linux-gnu-gcc  -fPIC -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native  -Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu -shared -Wl,-soname,libbtbb.so.0 -o libbtbb.so.0.3 CMakeFiles/btbb.dir/bluetooth_packet.c.o CMakeFiles/btbb.dir/bluetooth_piconet.c.o CMakeFiles/btbb.dir/bluetooth_le_packet.c.o CMakeFiles/btbb.dir/pcap.c.o CMakeFiles/btbb.dir/pcapng.c.o CMakeFiles/btbb.dir/pcapng-bt.c.o CMakeFiles/btbb.dir/version.c.o -lpcap 
cd /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/lib/src && /usr/bin/cmake -E cmake_symlink_library libbtbb.so.0.3 libbtbb.so.0 libbtbb.so
make[2]: Leaving directory '/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build'
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles  1 2 3 4 5 6 7
[100%] Built target btbb
make[1]: Leaving directory '/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build'
/usr/bin/cmake -E cmake_progress_start /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999_build/CMakeFiles 0
>>> Working in BUILD_DIR: "/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build"
make -j1 VERBOSE=1 
/usr/bin/cmake -H/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb -B/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build --check-build-system CMakeFiles/Makefile.cmake 0
/usr/bin/cmake -E cmake_progress_start /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles/progress.marks
make -f CMakeFiles/Makefile2 all
make[1]: Entering directory '/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build'
make -f CMakeFiles/btbb.dir/build.make CMakeFiles/btbb.dir/depend
make[2]: Entering directory '/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build'
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles 1
[ 25%] �[34m�[1mGenerating plugin.c
�[0m/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb/tools/make-dissector-reg.py /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb plugin packet-btbb.c packet-btlmp.c
cd /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build && /usr/bin/cmake -E cmake_depends "Unix Makefiles" /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles/btbb.dir/DependInfo.cmake --color=
Dependee "/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles/btbb.dir/DependInfo.cmake" is newer than depender "/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles/btbb.dir/depend.internal".
Dependee "/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles/CMakeDirectoryInformation.cmake" is newer than depender "/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles/btbb.dir/depend.internal".
�[35m�[1mScanning dependencies of target btbb
�[0mmake[2]: Leaving directory '/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build'
make -f CMakeFiles/btbb.dir/build.make CMakeFiles/btbb.dir/build
make[2]: Entering directory '/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build'
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles 2
[ 50%] �[32mBuilding C object CMakeFiles/btbb.dir/plugin.c.o
�[0m/usr/bin/x86_64-pc-linux-gnu-gcc  -Dbtbb_EXPORTS  -DNDEBUG -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native  -fPIC -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -I/usr/include/wireshark -I/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb    -o CMakeFiles/btbb.dir/plugin.c.o -c /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/plugin.c
/usr/bin/cmake -E cmake_progress_report /var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build/CMakeFiles 3
[ 75%] �[32mBuilding C object CMakeFiles/btbb.dir/packet-btbb.c.o
�[0m/usr/bin/x86_64-pc-linux-gnu-gcc  -Dbtbb_EXPORTS  -DNDEBUG -Os -mtune=nocona -pipe -frecord-gcc-switches -march=native  -fPIC -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -I/usr/include/wireshark -I/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb    -o CMakeFiles/btbb.dir/packet-btbb.c.o -c /var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb/packet-btbb.c
/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb/packet-btbb.c: In function ‘dissect_dm1’:
/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999/wireshark/plugins/btbb/packet-btbb.c:259:9: error: ‘packet_info’ has no member named ‘private_data’
    pinfo->private_data = &fake_acl_data;
         ^
CMakeFiles/btbb.dir/build.make:85: recipe for target 'CMakeFiles/btbb.dir/packet-btbb.c.o' failed
make[2]: *** [CMakeFiles/btbb.dir/packet-btbb.c.o] Error 1
make[2]: Leaving directory '/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build'
CMakeFiles/Makefile2:60: recipe for target 'CMakeFiles/btbb.dir/all' failed
make[1]: *** [CMakeFiles/btbb.dir/all] Error 2
make[1]: Leaving directory '/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build'
Makefile:116: recipe for target 'all' failed
make: *** [all] Error 2
 �[31;01m*�[0m ERROR: net-libs/libbtbb-9999::maintainer-zero failed (compile phase):
 �[31;01m*�[0m   emake failed
 �[31;01m*�[0m 
 �[31;01m*�[0m If you need support, post the output of `emerge --info '=net-libs/libbtbb-9999::maintainer-zero'`,
 �[31;01m*�[0m the complete build log and the output of `emerge -pqv '=net-libs/libbtbb-9999::maintainer-zero'`.
 �[31;01m*�[0m The complete build log is located at '/var/tmp/portage/net-libs/libbtbb-9999/temp/build.log'.
 �[31;01m*�[0m The ebuild environment file is located at '/var/tmp/portage/net-libs/libbtbb-9999/temp/environment'.
 �[31;01m*�[0m Working directory: '/var/tmp/portage/net-libs/libbtbb-9999/work/btbb_build'
 �[31;01m*�[0m S: '/var/tmp/portage/net-libs/libbtbb-9999/work/libbtbb-9999'

plugin.c :

/*
 * Do not modify this file.
 *
 * It is created automatically by Makefile or Makefile.nmake.
 */

#ifdef HAVE_CONFIG_H
# include "config.h"
#endif

#include <gmodule.h>

#include "moduleinfo.h"

#ifndef ENABLE_STATIC
G_MODULE_EXPORT const gchar version[] = VERSION;

/* Start the functions we need for the plugin stuff */

G_MODULE_EXPORT void
plugin_register (void)
{
  {extern void proto_register_btbb (void); proto_register_btbb ();}
  {extern void proto_register_btlmp (void); proto_register_btlmp ();}
}

G_MODULE_EXPORT void
plugin_reg_handoff(void)
{
  {extern void proto_reg_handoff_btbb (void); proto_reg_handoff_btbb ();}
  {extern void proto_reg_handoff_btlmp (void); proto_reg_handoff_btlmp ();}
}
#endif

Wireshark plugins btbb and btbredr not working/compiling with latest Wireshark 2.2

When compiling the latest sources of Wireshark plugins for WS 2.2, I get the following compile warnings:
For btbb ...

[ 20%] Generating plugin.c
Scanning dependencies of target btbb
[ 40%] Building C object CMakeFiles/btbb.dir/plugin.c.o
[ 60%] Building C object CMakeFiles/btbb.dir/packet-btbb.c.o
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c: In function ‘proto_reg_handoff_btbb’:
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c:572:16: warning: implicit declaration of function ‘new_create_dissector_handle’ [-Wimplicit-function-declaration]
  btbb_handle = new_create_dissector_handle(dissect_btbb, proto_btbb);
                ^
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbb.c:572:14: warning: assignment makes pointer from integer without a cast [-Wint-conversion]
  btbb_handle = new_create_dissector_handle(dissect_btbb, proto_btbb);
              ^
[ 80%] Building C object CMakeFiles/btbb.dir/packet-btbrlmp.c.o
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbrlmp.c: In function ‘proto_register_btbrlmp’:
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbrlmp.c:2864:32: warning: passing argument 2 of ‘register_dissector’ from incompatible pointer type [-Wincompatible-pointer-types]
  register_dissector("btbrlmp", dissect_btbrlmp, proto_btbrlmp);
                                ^
In file included from /home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbb/packet-btbrlmp.c:31:0:
/usr/include/wireshark/epan/packet.h:490:34: note: expected ‘dissector_t {aka int (*)(struct tvbuff *, struct _packet_info *, struct _proto_node *, void *)}’ but argument is of type ‘void (*)(tvbuff_t *, packet_info *, proto_tree *) {aka void (*)(struct tvbuff *, struct _packet_info *, struct _proto_node *)}’
 WS_DLL_PUBLIC dissector_handle_t register_dissector(const char *name, dissector
                                  ^
[100%] Linking C shared module btbb.so
[100%] Built target btbb

And for btbredr ...

[ 20%] Generating plugin.c
Scanning dependencies of target btbredr
[ 40%] Building C object CMakeFiles/btbredr.dir/plugin.c.o
[ 60%] Building C object CMakeFiles/btbredr.dir/packet-btbredr.c.o
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbredr/packet-btbredr.c: In function ‘proto_reg_handoff_btbredr’:
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbredr/packet-btbredr.c:651:19: warning: implicit declaration of function ‘new_create_dissector_handle’ [-Wimplicit-function-declaration]
  btbredr_handle = new_create_dissector_handle(dissect_btbredr,
                   ^
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbredr/packet-btbredr.c:651:17: warning: assignment makes pointer from integer without a cast [-Wint-conversion]
  btbredr_handle = new_create_dissector_handle(dissect_btbredr,
                 ^
[ 80%] Building C object CMakeFiles/btbredr.dir/packet-btlmp.c.o
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbredr/packet-btlmp.c: In function ‘proto_register_btlmp’:
/home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbredr/packet-btlmp.c:2864:30: warning: passing argument 2 of ‘register_dissector’ from incompatible pointer type [-Wincompatible-pointer-types]
  register_dissector("btlmp", dissect_btlmp, proto_btlmp);
                              ^
In file included from /home/b/Temp/ubertooth/libbtbb/wireshark/plugins/btbredr/packet-btlmp.c:31:0:
/usr/include/wireshark/epan/packet.h:490:34: note: expected ‘dissector_t {aka int (*)(struct tvbuff *, struct _packet_info *, struct _proto_node *, void *)}’ but argument is of type ‘void (*)(tvbuff_t *, packet_info *, proto_tree *) {aka void (*)(struct tvbuff *, struct _packet_info *, struct _proto_node *)}’
 WS_DLL_PUBLIC dissector_handle_t register_dissector(const char *name, dissector
                                  ^
[100%] Linking C shared module btbredr.so
[100%] Built target btbredr

Wiresharks compaints when started that the plugins cannot be started ...

Couldn't load module /usr/lib/i386-linux-gnu/wireshark/plugins/2.2.0/btbredr.so: /usr/lib/i386-linux-gnu/wireshark/plugins/2.2.0/btbredr.so: undefined symbol: new_create_dissector_handle

Couldn't load module /usr/lib/i386-linux-gnu/wireshark/plugins/2.2.0/btbb.so: /usr/lib/i386-linux-gnu/wireshark/plugins/2.2.0/btbb.so: undefined symbol: new_create_dissector_handle

static build not an option on linux

FIXME: This may be a hack

perhaps there should be separate libbtbb and libbtbb-static targets?

Please do create a target so I can make static libs on linux. Typically I would want to always make dynamic libs but also make static-libs if the user requests it.

wmem missing when building wireshark plugin btbb

Hi, I've tried building different versions of the btbb wireshark plugin against different versions of wireshark, but it's the same in all cases:
epan/wmem/wmem.h: No such file or directory

This file is included from /usr/include/wireshark/epan/proto.h. I understand this is not part of libbtbb, but given that wireshark did install (from source) with no issues leads me to think you might be able to give me a hint.

This guy seems to have the same problem, but I couldn't see an answer there: http://permalink.gmane.org/gmane.os.apple.macports.user/33078 Note that I also see the wmem.h in the source tree, but it doesn't end up in /usr/include..

In terms of versions, the latest test I did with wireshark 1.11.3 and libbtbb master I also tried libbtbb 2014-04-R2.

To build, I use:
cmake .
make

make fails.

Thanks a lot!

possible bug in btbb_winnow()

hi Dominic and the rest of the team,

i checked large parts of the code, optimized computation and found a hint to a possible bug:

bluetooth_piconet.c in function try_hop()
- pn->winnowed = 0; is commented out (THE hint)
- the piconet-struct is given to btbb_winnow() on line 515 and 531
- btbb_winnow starts a for-loop with the initial pn->winnowed value
- on the first loop there could be an illegal operation happening if the value is 0:

last_index = pn->pattern_indices[pn->winnowed - 1];
last_channel = pn->pattern_channels[pn->winnowed - 1];

shouldn't we add at least an assertion here?
it all depends on how btbb_process_packet() is called outside of the lib, it then calls try_hop() and so on

Wireshare plugin finding malformed packets only

I setup my ubertooth one with kismet and all the libraries by following in the setup.

Kismet seems to be seeing the traffic, at least the packet count goes up, but when I try to read them in wireshark all I see are Malformed Packets. Also the destination is always set to 00:00:00_00:00:00
See the attached screen shots.

Any ideas?

ubertooth-follow capture file unrecognizable WTAP_ENCAP = 0

I am trying to get ubertooth-follow to work and save the data to a pcapng file. I have installed the latest version of the ubertooth tools, updated libpcap, and also installed the latest release of libbtbb. Despite version notes that claim otherwise, I still get a link-layer type 255 isn't supported in savefiles when attempting to use the -q option with the ubertooth-follow. If I instead use the -r to capture to pcapng format wireshark fails to dissect the packet and just displays WTAP_ENCAP = 0 in the Info column.

Version:
libbtbb: 2015-10-R1
ubertooth: 2015-10-R1
OS: Ubuntu 14

Build Error

A clean build gives a cmake error:
CMake Error: File /home/dmaynor/code/ubertooth/libbtbb/lib/src/version.c.in does not exist.
CMake Error at lib/src/CMakeLists.txt:32 (configure_file):
configure_file Problem configuring file

Both version.c.in and version.h were missing. Including the two files from ubertooth/libubertooth/src fixed the problem.

trouble building btbb on Ubuntu

Hi,

I'm a new user, just bought a Ubertooth from Sparkfun and installed release 2012-10-R3. It works fine - I was able to monitor the packets using Kismet and view the result on Wireshark !

So I thought of updating to the latest versions (2014-02-R2). I'm following the instructions here:
https://github.com/greatscottgadgets/ubertooth/wiki/Build-Guide

However I'm not able to build the Wireshark plugin for btbb. I get the following error:

govind@govind-VirtualBox:~/libbtbb/wireshark/plugins/btbb/build$ sudo make install
[ 25%] Building C object CMakeFiles/btbb.dir/packet-btbb.c.o
/home/govind/libbtbb/wireshark/plugins/btbb/packet-btbb.c: In function ‘dissect_fhs’:
/home/govind/libbtbb/wireshark/plugins/btbb/packet-btbb.c:212:14: warning: assignment makes pointer from integer without a cast [enabled by default]
/home/govind/libbtbb/wireshark/plugins/btbb/packet-btbb.c: At top level:
/home/govind/libbtbb/wireshark/plugins/btbb/packet-btbb.c:277:78: error: expected ‘;’, ‘,’ or ‘)’ before ‘U’
/home/govind/libbtbb/wireshark/plugins/btbb/packet-btbb.c: In function ‘proto_reg_handoff_btbb’:
/home/govind/libbtbb/wireshark/plugins/btbb/packet-btbb.c:576:44: error: ‘dissect_btbb’ undeclared (first use in this function)
/home/govind/libbtbb/wireshark/plugins/btbb/packet-btbb.c:576:44: note: each undeclared identifier is reported only once for each function it appears in
make[2]: *** [CMakeFiles/btbb.dir/packet-btbb.c.o] Error 1
make[1]: *** [CMakeFiles/btbb.dir/all] Error 2
make: *** [all] Error 2

I use Ubuntu 12.04 (virtual machine on windows 7) and gcc version is 4.6.3

I tried again with a new VM, just using the released tarballs at:

https://github.com/greatscottgadgets/ubertooth/releases/download/2014-02-R2/ubertooth-2014-02-R2.tar.xz
https://github.com/greatscottgadgets/libbtbb/archive/2014-02-R2.tar.gz
And I still get the same error.

I guess it's something wrong with my setup, but I have no idea what. I was not able to email the mailing list, so I'm posting it here.

Thanks !
Govind

issue with ubertooth-btle

Hi I am using "ubertooth-btle -p -c capture.pcap" command and getting this error:

"control message unsupported"

I am using ubertooth 2015-10-R1 version.

What could be the problem?

Usage error after compiling with USE_PCAP=ON

Hi,

I managed to compile both bbtb and ubertooth with the USE_PCAP=ON, as I am quite interested in being able to create standard pcap files from ubertooth-rx and the likes. I can see the new -q option available for ubertooth-rx, but when I try the following:

ubertooth-rx -q bt.pcap

I get:

PCAP error:: bt.pcap: link-layer type 255 isn't supported in savefiles
ubertooth-rx: btbb_pcap_create_file: : Success

Any pointers greatly appreciated, thanks in advance. Or am I running too bleeding edge?

Support 4.1 extended LE LL packets

LE LL data packets grew in Bluetooth 4.1

Usage error of ubertooth-rx and save to pcap file

When I try ubertooth-rx -q mm.pcap

I get the following error:

PCAP error:: mm.pcap: link-layer type 255 isn't supported in savefiles
ubertooth-rx: btbb_pcap_create_file: : Success

I run the latest libpcap and libbtbb releases and still get this error.

Would love to get some help.

btbb and btbredr wireshark plugin build error on Ubuntu 12.04 LTS

Hi,

devel@ubuntu:~/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/build$ cmake -DCMAKE_INSTALL_LIBDIR=/usr/lib/wireshark/libwireshark1/plugins ..
-- The C compiler identification is GNU
-- Check for working C compiler: /usr/bin/gcc
-- Check for working C compiler: /usr/bin/gcc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Plugin will be installed in: /usr/lib/wireshark/libwireshark1/plugins
-- checking for one of the modules 'glib-2.0>=2.4.0'
-- Found GLib2: glib-2.0 /usr/include/glib-2.0;/usr/lib/x86_64-linux-gnu/glib-2.0/include
-- Looking for include files HAVE_GLIB_GREGEX_H
-- Looking for include files HAVE_GLIB_GREGEX_H - found
-- Looking for include files HAVE_GLIB_GCHECKSUM_H
-- Looking for include files HAVE_GLIB_GCHECKSUM_H - found
-- Configuring done
-- Generating done
-- Build files have been written to: /home/devel/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/build

devel@ubuntu:~/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/build$ make
[ 25%] Building C object CMakeFiles/btbb.dir/packet-btbb.c.o
/home/devel/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/packet-btbb.c: In function ‘dissect_fhs’:
/home/devel/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/packet-btbb.c:212:14: warning: assignment makes pointer from integer without a cast [enabled by default]
/home/devel/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/packet-btbb.c: At top level:
/home/devel/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/packet-btbb.c:277:78: error: expected ‘;’, ‘,’ or ‘)’ before ‘_U_’
/home/devel/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/packet-btbb.c: In function ‘proto_reg_handoff_btbb’:
/home/devel/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/packet-btbb.c:573:44: error: ‘dissect_btbb’ undeclared (first use in this function)
/home/devel/dev/libbtbb-2015-10-R1/wireshark/plugins/btbb/packet-btbb.c:573:44: note: each undeclared identifier is reported only once for each function it appears in
make[2]: *** [CMakeFiles/btbb.dir/packet-btbb.c.o] Error 1
make[1]: *** [CMakeFiles/btbb.dir/all] Error 2
make: *** [all] Error 2

Same applies to the btbredr plugin.

Package: wireshark
Status: install ok installed
Priority: optional
Section: net
Installed-Size: 2270
Maintainer: Ubuntu Developers <[email protected]>
Architecture: amd64
Version: 1.6.7-1
Replaces: ethereal (<< 1.0.0-3)
Depends: libc6 (>= 2.15), libgdk-pixbuf2.0-0 (>= 2.22.0), libglib2.0-0 (>= 2.24.0), libgtk2.0-0 (>= 2.18.0), libpango1.0-0 (>= 1.14.0), libpcap0.8 (>= 0.9.8), libportaudio2 (>= 19+svn20101113), libwireshark1 (>= 1.6.0-1), libwiretap1 (>= 1.6.0-1), libwsutil1 (>= 1.6.0-1), zlib1g (>= 1:1.1.4), wireshark-common (= 1.6.7-1)

Package: libpcap-dev
Status: install ok installed
Priority: optional
Section: libdevel
Installed-Size: 35
Maintainer: Ubuntu Developers <[email protected]>
Architecture: all
Source: libpcap
Version: 1.1.1-10
Depends: libpcap0.8-dev

Please help!