____________________________________________
First bridge your xbox 360 through your computer - we used Cain and Able.
____________________________________________
We captured the packets being sent when IDLE (on the dashboard) and we found the following IPs
217.43.229.188
65.55.42.180
____________________________________________
We then went Call of duty 4 (After we updated) and recorded these IPs
201.131.119.238
87.248.212.83
____________________________________________
We then went back to the dash removed the patches and went on call of duty 4 and recorded these.
87.248.208.49 <<<< Update server
65.55.42.183 <<<< Update request
The first one is the actual updating process (the downloading bit)
The second one - we believe, although it is a xboxlive IP sends and receives data about your call of duty 4 version.
The xbox 360 sent out 3 packets of info to 65.55.42.183 and then the server replied and started the download.
____________________________________________
We then went in ZoneAlarm Pro and blocked The first IP, The update dialog appeared but would not download anything (stayed at 0%)
We then removed that IP and added the second IP to the blocked list - We remained logged in to XBL and only disconnected when we clicked on XBL, it asked us to sign in again, we were unable until we removed the second IP from the list.
Just to test that the second IP was not related to XBL we went to the dashboard and then played another game and did not disconnect.
____________________________________________
The ports used by XBL to connect were
25717
and
3074
The first one seems irelevant as it was detected during the idle part.
The second one only appeared when downloading.
____________________________________________
That is all, if you want to have a look for yourself...
If you do find anything please send me a Private message or post in comments.
Rob.