Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This is my first serverfault post. I've been a member of Stack Overflow for a while and doubt that this question would fly over there.

I have my PS3 and XBOX 360 hard wired to a Linksys Wireless N router. I'd like to find a way to determine the server that these connect to when writing and receiving game leaderboard stats. This isn't meant for hacking leaderboards, but to try to figure out how to scrape the data. There is no API for accessing XBOX Live or PlaystationNetwork stat data, so I'd just simply like to try to look in a log file or watch in real time as connections are made and broken.

I have access to both a Mac on 10.6.3 and a PC on Windows 7. If I have to turn either of these into proxies I can do it. I just need to find out what software I need to start seeing this data.

Can you guys point me in the right direction?

share|improve this question
I didn't realize how complicated all this was <sad face>. I'm going to go with these suggestions "easiest" to "hardest", the first being to install a piece of software and try to sniff. Next I might try the live CD trick. The other stuff looks very daunting so I'll probably just have to go without doing it if the easy stuff doesn't work – Justin Oct 22 '10 at 18:19
up vote 3 down vote accepted

Install squid (an HTTTP proxy) on the MAC, enable logging, and tell the devices to use the proxy. If you need to see more detail then additionally install wireshark (packetsniffer) on the Mac and tell it to sniff port 80.

You don't need to get fancy and install a router or a bridge or set up a transparent (intercept) proxy.

share|improve this answer
This is what I'm going to try for now. – Justin Oct 22 '10 at 18:20

That's a really tricky environment for what you want. I'm doing much the same thing (Wii :}) by my environment is different. I have a network switch in the front room where the wireless access-point, Wii, and the DVR all plug into, and a long cable to the back room that connects to a Linux machine. That Linux machine is in turn plugged into the router and off the packets go.

The Linux machine is configured to be an ethernet bridge. This makes sniffing dead easy, as all I have to do is run tcpdump on br0 (the bridge Interface). This has helped diagnose many problems. If I was of a mind to do this, I could probably create an intercept proxy with Squid and IPTables.

The problem for you is that Mac doesn't have any ability to do Bridging, which means Windows is your only hope. It will require two network ports. For that, there is a good SuperUser question on how to set it up.

share|improve this answer

Without setting up an inline box like sysadmin1138 has, what you can do is execute a man in the middle attack against your gaming consoles, via arp-cache poisoning. Basically you are tricking your gaming consoles into thinking that your computer is the router, and tricking your router into thinking that your computer is the gaming consoles. So, all traffic from the gaming consoles to the router and vice-versa makes a stop through your computer first.

I think it would be possible to set it up on mac or windows, though I'm not sure how.

What I would do is just get a linux live CD designed for hacking such as backtrack ( ), boot that up, and use the built-in tools to execute the attack, and then wireshark to analyze the network data. I believe backtrack comes with both dsniff and ettercap, both of which can do the attack. I think dsniff will be a little simpler for this with the plain arpspoof command. Remember to enable ip forwarding before executing it or you will break traffic.

edit: embobo's solution might be a lot easier for you if it's possible to set those consoles up to use HTTP proxies, I'm not sure if they can do that though as I've never used a PS3 or xbox 360.

share|improve this answer
PS3 supports HTTP proxies. I don't know about the Xbox 360. – Mark Wagner Oct 22 '10 at 19:20

If you are willing to replace you router firmware with something like openwrt you could probably install tcpdump. You may also be able to set a firewall rule to tee your traffic so a copy is sent to another machine.

share|improve this answer

Since you are running a Linksys, you might take a look at WallWatcher -

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.