RFCOMM
Definition
Radio Frequency Communication, the Bluetooth protocol that emulates a serial RS-232 connection over an L2CAP channel. Used by profiles including Serial Port Profile (SPP), Hands-Free Profile (HFP), and Dial-Up Networking (DUN). RFCOMM channel assignments and data logs appear in system-level Bluetooth stack files.
- Full name
- Radio Frequency Communication
- Emulates
- Serial RS-232 connection
- Runs over
- L2CAP channel
- Used by profiles
- SPP, HFP, DUN
Common questions
Where would an examiner look for RFCOMM channel activity on a device?+
System-level Bluetooth stack logs and databases store channel assignments and connection records, typically requiring a full filesystem or physical extraction to access rather than a standard logical acquisition of user data.
Why does RFCOMM matter for hands-free and dial-up profiles specifically?+
SPP, HFP, and DUN all need a reliable serial-style data stream to carry call control, audio signalling, or modem-style AT commands, which is exactly what RFCOMM's emulation of RS-232 over Bluetooth provides at the transport layer.
Does RFCOMM itself encrypt the data it carries?+
No, RFCOMM relies on the underlying Bluetooth link layer for any encryption and authentication, so the security of an RFCOMM session depends on the pairing and link-level security mode negotiated beneath it.
Related terms
- BD_ADDR (Bluetooth Device Address)
- The 48-bit hardware address assigned to each classic Bluetooth device by its manufacturer. Analogous to a MAC address on Ethernet. Unlike BLE...
- GATT (Generic Attribute Profile)
- The protocol framework used by BLE for data exchange. A GATT server exposes data as Services and Characteristics; a GATT client reads...
- Link Key / Long-Term Key (LTK)
- The cryptographic secret negotiated during Bluetooth pairing that is stored on both devices and used to authenticate and encrypt subsequent connections. In...
- Resolvable Private Address (RPA)
- A BLE address type that rotates on a timer (typically every 15 minutes) but can be resolved back to the device's true...
- Ubertooth One
- An open-source USB Bluetooth sniffing platform developed by Michael Ossmann that can capture raw Bluetooth BR/EDR and BLE frames from the air....