iPhone and bcm-2045b

Iain Hibbert plunky at rya-online.net
Sun Nov 22 18:52:36 UTC 2009


On Mon, 16 Nov 2009, Iain Hibbert wrote:

>    A friend of mine just got an iPhone 3G, he was here the other day and I
> tried to probe the device using my laptop (Thinkpad T60 with NetBSD) which
> has bluetooth built in (a Broadcom BCM2045B connected via internal USB)
>
> I managed to discover it ok, but when I opened a connection to the device,
> my controller detached from the USB bus!

Just as a followup to this, my CSR dongle managed to connect just fine so
I guess the Broadcom controller has a bug causing it to crash. Output of
my SDP query tool below. (searched for L2CAP uuid)

The iPhone bluetooth capability is kind of limited for a phone though,
with no Object Push or File Transfer. The NAP service is advertised but
returns "Not Allowed" to connection setup attempts (supposedly its
disabled by the network operator).

iain


ServiceRecordHandle: 0x4f491116
ServiceClassIDList:
    Network Access Point
ServiceRecordState: 0x00000000
ProtocolDescriptorList:
    L2CAP (PSM 0x000f)
    BNEP (v1.0; IPv4, ARP, 0x8100, IPv6)
BrowseGroupList:
    Public Browse Root
LanguageBaseAttributeIDList:
    en.UTF-8 base 0x0100
    fr.UTF-8 base 0x0110
    de.UTF-8 base 0x0120
    ja.UTF-8 base 0x0130
ServiceAvailability: 255/255
BluetoothProfileDescriptorList:
    Network Access Point, v1.0
ServiceName: "PAN Network Access Profile"
ServiceDescription: "Network Access Point"
SecurityDescription: Service-level Security
NetAccessType: 3G Cellular
MaxNetAccessRate: 256000


ServiceRecordHandle: 0x4f49a620
ServiceClassIDList:
    00000000-deca-fade-deca-deafdecacafe
ServiceRecordState: 0x00000000
ProtocolDescriptorList:
    L2CAP
    RFCOMM (channel 2)
BrowseGroupList:
    Public Browse Root
LanguageBaseAttributeIDList:
    en.UTF-8 base 0x0100
    fr.UTF-8 base 0x0110
    de.UTF-8 base 0x0120
    ja.UTF-8 base 0x0130
ServiceAvailability: 255/255
BluetoothProfileDescriptorList:
    Serial Port, v1.0
ServiceName: "Wireless iAP"


ServiceRecordHandle: 0x4f49110c
ServiceClassIDList:
    A/V Remote Control Target
ServiceRecordState: 0x00000000
ProtocolDescriptorList:
    L2CAP (PSM 0x0017)
    AVCTP (v1.2)
BrowseGroupList:
    Public Browse Root
LanguageBaseAttributeIDList:
    en.UTF-8 base 0x0100
    fr.UTF-8 base 0x0110
    de.UTF-8 base 0x0120
    ja.UTF-8 base 0x0130
ServiceAvailability: 255/255
BluetoothProfileDescriptorList:
    A/V Remote Control, v1.0
ServiceName: "AVRCP Device"
ServiceDescription: "Remote Control Device"
SupportedFeatures:
    Category 1


ServiceRecordHandle: 0x4f49110a
ServiceClassIDList:
    Audio Source
ServiceRecordState: 0x00000000
ProtocolDescriptorList:
    L2CAP (PSM 0x0019)
    AVDTP (v1.2)
BrowseGroupList:
    Public Browse Root
LanguageBaseAttributeIDList:
    en.UTF-8 base 0x0100
    fr.UTF-8 base 0x0110
    de.UTF-8 base 0x0120
    ja.UTF-8 base 0x0130
ServiceAvailability: 255/255
BluetoothProfileDescriptorList:
    Advanced Audio Distribution, v1.2
ServiceName: "Audio Source"
SupportedFeatures:
    Player


ServiceRecordHandle: 0x4f49112f
ServiceClassIDList:
    Phonebook Access Server
ServiceRecordState: 0x00000000
ProtocolDescriptorList:
    L2CAP
    RFCOMM (channel 13)
    OBEX
BrowseGroupList:
    Public Browse Root
LanguageBaseAttributeIDList:
    en.UTF-8 base 0x0100
    fr.UTF-8 base 0x0110
    de.UTF-8 base 0x0120
    ja.UTF-8 base 0x0130
ServiceAvailability: 255/255
BluetoothProfileDescriptorList:
    Phonebook Access, v1.0
ServiceName: "Phonebook"
SupportedRepositories:
    Local Phonebook


ServiceRecordHandle: 0x4f491104
ServiceClassIDList:
    IrMC Sync
ServiceRecordState: 0x00000000
ProtocolDescriptorList:
    L2CAP
    RFCOMM (channel 1)
    OBEX
BrowseGroupList:
    Public Browse Root
LanguageBaseAttributeIDList:
    en.UTF-8 base 0x0100
    fr.UTF-8 base 0x0110
    de.UTF-8 base 0x0120
    ja.UTF-8 base 0x0130
ServiceAvailability: 255/255
BluetoothProfileDescriptorList:
    IrMC Sync, v1.0
ServiceName: "IrMC Sync"
SupportedDataStoresList:
    Phonebook


ServiceRecordHandle: 0x4f49111f
ServiceClassIDList:
    Handsfree Audio Gateway
    Generic Audio
ServiceRecordState: 0x00000000
ProtocolDescriptorList:
    L2CAP
    RFCOMM (channel 8)
BrowseGroupList:
    Public Browse Root
LanguageBaseAttributeIDList:
    en.UTF-8 base 0x0100
    fr.UTF-8 base 0x0110
    de.UTF-8 base 0x0120
    ja.UTF-8 base 0x0130
ServiceAvailability: 255/255
BluetoothProfileDescriptorList:
    Handsfree, v1.5
ServiceName: "Handsfree Gateway"
Network: Ability to reject a call
SupportedFeatures:
    3 Way Calling
    Echo Cancellation/Noise Reduction


ServiceRecordHandle: 0x00000000
ServiceClassIDList:
    Service Discovery Server
ServiceRecordState: 0x00000000
ProtocolDescriptorList:
    L2CAP
    SDP
LanguageBaseAttributeIDList:
    en.UTF-8 base 0x0100
    fr.UTF-8 base 0x0110
    de.UTF-8 base 0x0120
    ja.UTF-8 base 0x0130
ServiceAvailability: 255/255
VersionNumberList: v1.0
ServiceDatabaseState: 0x00000008
AttributeID 0x0300:
    seq8(56)
     str8(3)      "2.1"
     str8(49)     "Copyright (c) 2007 Apple Inc. All rights rese ...
AttributeID 0x0308:
    url8(13)      "www%2eapple%2ecom"




More information about the freebsd-bluetooth mailing list