Xtrace sniffs X traffic by faking an X server and forwarding all connections to a real X server.