Using Fiddler to inspect web service calls

Fiddler is a web debugging proxy which logs all HTTP and HTTPS traffic between your device and the Internet. Use Fiddler to log and inspect traffic to and from the Xbox Live services and relying party web services, to understand and debug web service calls. Fiddler is available in multiple versions. 'Fiddler Classic' is freeware and the following section refers to this version only.

For Microsoft Game Development Kit (GDK) projects running on Xbox One or later

See Fiddler for details.

For Xbox One (or later) Xbox One Software Development Kit projects

In normal operation, a console that communicates through a proxy is at risk of having its communications modified by the proxy, possibly allowing players to cheat. Thus, consoles are designed not to allow communication through a proxy. Using Fiddler with your Xbox One (or later) dev kit requires that you perform some special configuration steps on the dev kit to allow it to use the Fiddler proxy.

Fiddler Classic can be downloaded from the Fiddler website.

Fiddler can impact the network status reported by the console. If an upstream connection is disabled from the machine running Fiddler, the console may not detect this disconnection until the authentication of the console has expired. If you are using Fiddler, be sure to disconnect the connection between the console and the computer running Fiddler, rather than using Fiddler to simulate a disconnect. Better still, use the network stress tools so simulate disconnection for testing purposes.

Installing and enabling Fiddler on the development PC

To install and enable Fiddler to monitor traffic from your dev kit, follow these steps.

1. Install Fiddler Classic on your development PC, following the directions on the Fiddler website.

2. Launch Fiddler and select Fiddler Options from the Tools menu.

3. Select the Connections tab, and ensure that the Allow remote computers to connect checkbox is checked.

4. Click OK to accept your change to the settings. You will see a dialog box saying that Fiddler must be restarted for the change to take effect, and that you may need to configure your firewall manually. Click OK on this dialog, but do not restart Fiddler yet.

5. Configure the necessary firewall rule to allow remote computers to connect. Start the Windows Firewall Control Panel applet. Click Advanced Settings, and then Inbound Rule. Find the rule named "FiddlerProxy", and scroll to the right, verifying that each of the following settings appears for that rule.

6. Configure Fiddler to capture and decrypt HTTPS traffic.

   1. To enable best performance, set Fiddler to use Streaming Mode by clicking the Stream button on the button bar.
   2. In Fiddler, select Tools, then Fiddler Options, then HTTPS.
   3. Check the Decrypt HTTPS traffic checkbox. If a messagebox asks whether to configure Windows to trust the CA certificate, click No.
   4. Click the Export Root Certificate to Desktop button.

7. Exit Fiddler and start it again.

To configure a dev kit to use Fiddler as its proxy to the Internet

Fiddler configuration on the dev kit has been simplified from the method used in previous releases.

1. Copy the Fiddler root certificate that you exported to the desktop, to the dev kit as xs:\Microsoft\Cert\FiddlerRoot.cer. You can use the following command: xbcp [local Fiddler Root directory]\FiddlerRoot.cer xs:\Microsoft\Cert\FiddlerRoot.cer

2. Create a text file named ProxyAddress.txt, with the IP address or hostname of the development PC running Fiddler and the port number where Fiddler is listening as the only content in the file. Format the name/IP address and port as follows: "HOST:PORT". (By default, Fiddler uses port 8888.) For example, "10.124.220.250:8888" or "my_dev_pc.contoso.com:8888".

3. Copy that file to the dev kit as xs:\Microsoft\Fiddler\ProxyAddress.txt. To do that, you can use the following command: xbcp [local Proxy Address file directory]\ProxyAddress.txt xs:\Microsoft\Fiddler\ProxyAddress.txt

4. Reboot the dev kit by typing xbreboot into the command prompt.

To stop using Fiddler

To stop using Fiddler as a proxy to the Internet, and thus tracing all of the dev kit's network traffic in Fiddler, simply rename or delete the FiddlerRoot.cer file on the dev kit, and then reboot the dev kit.

How it works

The presence of both a xs:\Microsoft\Cert\FiddlerRoot.cer file and a xs:\Microsoft\Fiddler\ProxyAddress.txt file at boot time causes the dev kit to configure itself to use the proxy server specified in ProxyAddress.txt. If either file is missing, then the dev kit will not configure itself to operate through a Fiddler proxy.

Each PC with Fiddler installed uses a different Fiddler root certificate. If you have more than one PC that might be used to provide a Fiddler proxy for your dev kit, you can copy each PC's Fiddler root certificate into the xs:\Microsoft\Cert directory, as long as one of them is named FiddlerRoot.cer.

All of the certificates in the Cert directory are checked when a Fiddler proxy is being authenticated. The Fiddler instance on whichever PC's address is in ProxyAddress.txt will be used as a proxy, as long as its certificate is present in the Cert directory.

For Xbox One (or later) UWP projects

Follow the steps in the article How to use Fiddler with Xbox One when developing for UWP ⬀ in the UWP documentation.

For Windows UWP PC apps

1. Make sure that the current user is in the administrator group on the PC.

2. Download Fiddler from https://www.telerik.com/fiddler.

3. Make sure that you select the version that is "Built for .NET 4".

4. Once installed, go to Tools->Fiddler Options and enable Capture HTTPS CONNECTs and Decrypt HTTPS traffic. All communications between the runtime and Xbox services are encrypted with SSL. Without this option you won't see anything useful. Accept all dialogs Fiddler pops up (there should be 5 dialogs, including UAC).

5. Go to "WinConfig", "Exempt All", and "Save Changes". Otherwise Fiddler won't work with Store apps.

6. Now if you run your app, you should see the requests/responses between the app, runtime, and Xbox services.

To debug UWP OS level calls, which isn't usually needed but can be helpful when debugging sign-in and in-game events, you need to configure Fiddler to capture WinHTTP traffic. This can be done as follows:

    netsh winhttp set proxy 127.0.0.1:8888 "<-loopback>"

where the port 8888 matches the port you've configured on Fiddlers Tools | Options | Connections tab, which by default is 8888.

To undo that, do the following:

    netsh winhttp reset proxy