Sniffing emplode's trafic is one way (complicated by the fact that emplode only has controls for play/pause and tune/list enqueueing). Alternative could be to run displayserver and emulate its Java client.