Found the YouTube video How To Reverse Engineer A Bluetooth Device and started to follow it but it did not really work as expected so record all differences here.

  • The HCI snoop log were not available in \FS\data\misc\bluetooth\logs but rather in \FS\data\log\bt.
  • The bluetooth device was disabled on my Raspberry Pi 3, needed to run the following commands
    sudo rfkill unblock all<br />sudo hciconfig hci0 up
  • Scan for the device: sudo hcitool lescan | grep “C7:57”