AWDL Radar

AWDL Radar is a research / monitoring tool for observing Apple Wireless Direct Link (AWDL), Bluetooth Low Energy (BLE) advertisements, and mDNS (Bonjour) traffic.

It converts raw wireless signals into a unified event model, pseudonymizes device identifiers, and classifies each event into 8 high-level categories:

• radar – presence / proximity over time
• security_playground – scripted experiments, e.g., AirDrop scenarios
• fingerprint – device / OS fingerprinting
• bridge – remote / tunneled environments
• honeypot – inbound AirDrop offers to our node
• qos – QoS / throughput / performance
• time_machine – traffic replay / time-machine
• ai_analyzer – high-level AI / ML analysis

Requirements

• Linux (tested on Ubuntu / Raspberry Pi OS)
• Python 3.10+
• scapy for 802.11 / mDNS
• bleak for BLE (optional)
• 802.11 interface capable of monitor mode
• BlueZ + dbus for BLE

Installation

pip install scapy bleak