Thought I would post what I have found on the initial setup communication between vista and the 360 extender. Not sure what this is but here is the first couple pings back and forth. Here was the key that was used...

1881-5504

The first communication back and forth is similar to what was found over here. Except that it happens on port 1046.

Here is the initial ping from vista to the 360 that is 72 bytes long...

51 C6 74 C0 01 41 00 40 01 18 00 04 00 00 00 00 01 10 00 10 00 00 00 00 00 00 00 00 02 00 00 12 5A B0 7A EF 01 13 00 10 EB 81 36 E7 62 1C 83 40 BD 99 A1 C4 08 D3 04 57 01 39 00 04 00 F0 61 00 01 9D 00 04 00 B6 58 20 

Here is the response from the 360 that is 16 bytes long...

51 C6 74 C0 01 22 00 08 01 18 00 04 01 00 00 00 

I am not sure this has anything to do with the whole setup process. I don't see this when I try and emulate an extender.

Next come the upnp service messages. These use the mstrustagreement service. They are basically just HTTP posts and responses using soap messages. All of these happen over port 3391.

Post from Vista to 360

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
	<SOAP-ENV:Body>
		<m:Exchange xmlns:m="urn:schemas-microsoft-com:service:mstrustagreement:1">
			<HostID xmlns:dt="urn:schemas-microsoft-com:datatypes" dt:dt="string">uuid:e73681eb-1c62-4083-bd99-a1c408d30457</HostID>
			<HostCertificate xmlns:dt="urn:schemas-microsoft-com:datatypes" dt:dt="string">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</HostCertificate>
			<IterationsRequired xmlns:dt="urn:schemas-microsoft-com:datatypes" dt:dt="ui1">4</IterationsRequired>
			<HostConfirmAuthenticator xmlns:dt="urn:schemas-microsoft-com:datatypes" dt:dt="string">8konzjVSsQbipg+YX9DJV7wEgxw=</HostConfirmAuthenticator>
		</m:Exchange>
	</SOAP-ENV:Body>
</SOAP-ENV:Envelope>

Response from 360

<s:Envelope  xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
	<s:Body>
		<u:ExchangeResponse xmlns:u="urn:schemas-microsoft-com:service:mstrustagreement:1">
			<DeviceID>uuid:20000000-0000-0000-0200-00125AB07AEF</DeviceID>
			<DeviceCertificate>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</DeviceCertificate>
			<DeviceConfirmAuthenticator>G1iojrtB5OaBsN61ZSiWLoCAbLc=</DeviceConfirmAuthenticator>
		</u:ExchangeResponse>
	</s:Body>
</s:Envelope>

There is more but I will add that in a later post.