I’m finally starting to feel like low level hardware things again at long last.
Following the vague instructions here I now have a functional bluetooth sniffer for free! I’m not sure quite what to do with it now; I think I’ll fix up the linux software to handle it properly (I believe ethereal/wireshark can already handle the dumps).