[heffer]

I've had a lot of fun with this reverse engineering my Napoleon gas fireplace BLE controller for the purposes of integration with Home Assisstant. In the process discovered the UART protocol it speaks with the very common SIT ProFlame 2 fireplace controller. So you could now build a very cheap controller for ProFlame 2 based fireplaces.

I went the Android Bluetooth HCI snoop log + Wireshark route.

I wrote a Wireshark protocol dissector for that specific BLE protocol which you can use with the Android BT logs: https://github.com/kaechele/bonaparte/blob/main/contrib/wire... I found this extremely valuable when debugging, because it allows me to visualize both the packets the OEM app sends and compare this with what my library sends over the air.

I ended up documenting my findings here: https://bonaparte.readthedocs.io/

BLE hacking is pretty fun.