Question

因此，我正在尝试监视PC上活动的蓝牙连接的流量。我能够获得有关到远程设备的活动连接的一些信息，例如SOCKADDR_BTH。我以为可以使用远程设备的端口信息并将其绑定到套接字以监视通信量，但是设备发现未提供端口信息，请参见下文：

Device name:WH-1000XM2 Device connected: 65536 Device remembered: 1 Device authenticated: 1 Remote Bluetooth device is 0x702605aba41d, server channel = 0 Local Bluetooth device is 0x84ef18b8460a, server channel = 0

这是相应的代码纺纱机：

/*Preparing the queryset return buffer*/
pwsaResults = (LPWSAQUERYSET)buffer;
pwsaResults->dwNameSpace = NS_BTH;
pwsaResults->dwSize = sizeof(WSAQUERYSET);
BTH_QUERY_DEVICE qDev{};
qDev.length = 1;
BLOB blb;
blb.cbSize = sizeof(BTH_QUERY_DEVICE);
blb.pBlobData = reinterpret_cast<PBYTE>(&qDev);
pwsaResults->lpBlob = &blb;

while (WSALookupServiceNext(hLookup, LUP_RETURN_ADDR | LUP_RETURN_NAME | LUP_CONTAINERS | LUP_RETURN_TYPE | LUP_RES_SERVICE | LUP_FLUSHCACH, &swSize, pwsaResults) == NO_ERROR)
{
    pAddrInfo       = (CSADDR_INFO*)pwsaResults->lpcsaBuffer;
    pBtSockRemote   = (SOCKADDR_BTH*)(pwsaResults->lpcsaBuffer->RemoteAddr.lpSockaddr);
    pBtSockLocal    = (SOCKADDR_BTH*)(pwsaResults->lpcsaBuffer->LocalAddr.lpSockaddr);

    wprintf(L"Device #:%d\n", nDevicesFound);
    wprintf(L"Device name:%s\n", pwsaResults->lpszServiceInstanceName);
    wprintf(L"Device connected: %d\n", (pwsaResults->dwOutputFlags & BTHNS_RESULT_DEVICE_CONNECTED));
    wprintf(L"Device remembered: %d\n", (pwsaResults->dwOutputFlags & BTHNS_RESULT_DEVICE_REMEMBERED)>0);
    wprintf(L"Device authenticated: %d\n", (pwsaResults->dwOutputFlags & BTHNS_RESULT_DEVICE_AUTHENTICATED)>0);
    wprintf(L"Remote Bluetooth device is 0x%04x%08x, server channel = %d\n",
        GET_NAP(pBtSockRemote->btAddr), GET_SAP(pBtSockRemote->btAddr), pBtSockRemote->port);
    wprintf(L"Local Bluetooth device is 0x%04x%08x, server channel = %d\n",
        GET_NAP(pBtSockLocal->btAddr), GET_SAP(pBtSockLocal->btAddr), pBtSockLocal->port);

    nDevicesFound++;

}

我当时正在考虑使用WSAIoctl来嗅探流量。

Winsock蓝牙获取活动连接的套接字句柄

0 个答案: