PS3 Packet Capture on PS3 - 2019 Windows 10 Edition

VTSTech

VTSTech

Developer
This is how you can capture packets on the PS3 from a Windows 10 PC on the same network.

Things you will need.

1) Wireshark
2) Arpspoof
3) Npcap (Included with Wireshark)
4) PS3 IP
5) Router IP

First. Lets download some things.

Wireshark v3.2.7 x64 https://2.na.dl.wireshark.org/win64/Wireshark-win64-3.2.7.exe
Arpspoof v0.1 https://github.com/alandau/arpspoof/releases/download/v0.1/arpspoof.exe

Next. Install Wireshark. IMPORTANT, When installing check the 'Winpcap API-Compatability' box or Arpspoof won't work.

Reboot.

Ok. Now. Open Windows Explorer. Go to C:\Windows\System32\ and find cmd.exe - Right click on it. Run as Administrator

In the command prompt window type "ipconfig".

Look for a line like this
Code: 
  Default Gateway . . . . . . . . . : fe80::5e8f:e0ff:fe30:7c1e%8
  192.168.137.1

Make note of the 192.168.x.x number

now do "cd \" to get to the top of C:\ and navigate to where you put arpspoof.exe

I put it in C:\Tools\ARPSpoof\arpspoof.exe

Code: 
C:\>cd Tools\ARPSpoof
C:\Tools\ARPSpoof>

Now type "arpspoof --list" If you get output and not an error. Npcap is installed correctly.

Run Wireshark. And now go to your PS3.

On your PS3. In the 2nd row of items on the XMB, Beside your Usernames. Go to 'Network Settings' and 'Networks and Connection Status List'

Find 'IP Address' - It should look similar to the Gateway Address you made note of earlier.

Go back on PC. In your Command Prompt at the ARPSpoof> folder type this

Code: 
arpspoof PS3_IP GATEWAY_IP

In my case that looked like:

Code: 
arpspoof 192.168.137.212 192.168.137.1

If everything worked. You should see

Code: 
Resolving victim and target...
Redirecting 192.168.137.212 (xx:xx:xx:xx:xx:xx) ---> 192.168.137.1 (xx:xx:xx:xx:xx:xx)
  and in the other direction
Press Ctrl+C to stop

Now in Wireshark which should be running and just waiting for a 'Capture Filter' set the filter to this:

Code: 
host 192.168.137.212

Also make sure to select the correct adapter. It will have activity on it, hover over them to see which 'addresses' they have. It should more than likely be 192.168.x.x

4050ff8b4da565bb972c0e14e0d6c211.png


Using your PS3 IP of course...Hit enter and you should start to see any traffic from your PS3 .. going to your computer ... and out to your router. And vice versa.
--
11/01/2019 - Updated link to Wireshark v3.0.6 x64, Added image/text about selecting correct adapter.
10/17/2019 - Updated link to Wireshark v3.0.5 x64
 
Last edited:
Thanks. It also works with Windows 8.1 but I've a lot of blocked packages (TCP & ICMP mainly) and the connection speed is very slow on PS3 while capturing. I'm using cables and deactivating the Windows Firewall didn't helped. I can live with that but file is just getting very big with useless warnings. Is this normal?
 
I use the 'not arp' filter -- as we are flooding arp. connection is degraded and re-transmissions are common.

Try to capture specific game events/sessions and leave game/stop capture relatively quickly. Even a 20 minute capture can be quite large depending on how much traffic the game generates.
 
Hello, wouldt it be better to directly connect the playstation 3 System to a computer with 2 network cards (Windows or Linux) and capture on the incoming network interface?
 
Another solution could be by using a Hub with uplink (make sure there is no switch module present in the device)
or with port mirroring (if your router/switch Firmware supports this feature dd-wrt does with iptables)
 
I wrote something that can reply to GET/POST requests made to redirected servers. It's crude, but it works.

Convert your response to hex like '00 FF 60', And when PS3 makes req. You send your POST/GET response back with that program.

TCP/UDP Packet Listener/Sender

https://www.psx-place.com/threads/ps3-capture-project.25067/page-3#post-206584

A better option would be to run an actual HTTP server and use FakeDNS to send PS3 to your own IP on LAN.

We cannot modify what the PS3 sends us. But we can modify what gets sent back by not sending it to Sony/Activision/Ubi or wherever it was supposed to go originally.
 
10/17/2019 - Updated link to Wireshark v3.0.5 x64[/QUOTE]
at the part ps3 ip gateway ip i get "can't find interface" whats this meaning ?
 
You must log in or register to reply here.

Similar threads

Back
Top