Repository navigation
Device classifier
The device classifier labels each Bluetooth device by what it is, such as AirPods, a Tile tag, a DJI drone, or a tire-pressure sensor. It reads the label from the device's own advertisement, so it is passive and never connects to anything. It works on Bluetooth Low Energy advertisements only.
Every Bluetooth Low Energy device broadcasts an advertisement that can carry a manufacturer ID, service UUIDs, service data, and an appearance code. The classifier reads those fields and works out what the device is.
It decodes the continuity and pairing protocols of the four biggest vendors: Apple (AirDrop, AirPods, Handoff, FindMy, and the Nearby state such as locked or active), Microsoft (Connected Devices and Swift Pair), Google (Fast Pair), and Samsung (Buds and SmartTag). For everything else, it matches the advertisement against a built-in table of 178 device labels, then falls back to the device's advertised appearance.
The labels fall into 15 groups: Phone, Tag, Audio, Wearable, Vehicle, Drone, Camera, Radio, Glasses, Health, Lock, Home, Computer, Input, and Beacon. A device scan shows a count for each group it heard, and each device row carries its label.
The classifier runs inside every scan that hears Bluetooth. It is on by default.
- Web UI: Scan tab → the Classify BLE devices switch. The label appears on each Bluetooth row in the results.
-
Over mesh:
@ALL BLE_CLASSIFY:1turns it on,@ALL BLE_CLASSIFY:0turns it off. The node repliesCONFIG_ACK:BLE_CLASSIFY:1.
| Setting | What it does | Default | How to change |
|---|---|---|---|
| Classify BLE devices | Labels Bluetooth devices by type | On | Scan tab switch, or BLE_CLASSIFY:0 / 1
|
Turning it off saves processing time and memory on a busy channel. Labels already found stay. The setting is saved on the node.
A device shows no label when its advertisement carries nothing that identifies it. This is normal for a phone that has randomized its address and strips its service data, and for a device that advertises only a bare address. The classifier does not guess.
The label groups and the detectors behind them are in the Sentinel page for attack tools, and in the device discovery page for how a scan presents them. Vendor names for Wi-Fi and Bluetooth MACs come from the built-in OUI table, shown as V= on each row.