View Single Post
  #8  
Old 01-04-2011, 09:53 AM
OSSRecording OSSRecording is offline
Junior Member
 
Join Date: Jan 2011
Posts: 3
OSSRecording is on a distinguished road
Default

Re: www.myfreecams.com: How can I record free sex web-cam chat (rtmp:// .flv)


I have been working on this yesterday.
Since my main station is on linux, I can't use Replay Media Catcher, so I'm working with rtmpdump.

The use of rtmpsuck, described in this thread
How to use rtmpsuck in Ubuntu 10.04 Lucid Lynx
is interesting but only permit to record one stream at once.
I was stuck with the parameters given by rtmpsuck when using them with rtmpdump. Then I read about Wireshark and packets analysis.

1. Start wireshark on your interface connected to the internet.
2. Use this Filter: rtmpt.amf.string matches "tcUrl"
3. Look the section 'Real Time Messaging Protocol (Handshake part 3)'
Unfolding 'AMF Object', you'll find the same parameters given by rtmpsuck:

Constant parameters
Code:
 - app: NxServer
 - flashVer: LNX 10,2,161,23
 - swfUrl: http://www.myfreecams.com/mfc2/flash/MfcVideoBeta.swf?nc=33
Variable parameters
Code:
 - tcUrl: rtmp://video187.myfreecams.com:1935/NxServer
 - pageUrl: http://www.myfreecams.com/mfc2/static/player.html?
At the end there are a bunch of strings and numbers that will need to be passed with the -C parameter of rtmpsuck in order to be logged.
Code:
- AMF Object Property
      AMF string: objectEncoding
      AMF number: 0
AMF type: End of object (9)
AMF type: Number (0)
AMF number: 54578976 // Session ID
AMF type: String (2)
AMF string: [Empty]  // Password, nil if guest (don't share this value!)
AMF type: Number (0)
AMF number: 104281302 // ModelID
AMF type: String (2)
AMF string: DOWNLOAD
AMF type: Number (0)
AMF number: 4281302 // Room Number? (In browser, it corresponds to the last number of the value of the 'mh' cookie. This cookie looks like a history of the room you have visited).
With all these info and rtmpdump manual, you should be ok. The only trick is that AMF 'objectEncoding' must be appended at the end of pageURL. Syntax looks like this:
Code:
./rtmpdump -W ($swfUrl) -s  ($swfUrl) -a ($app) -f ($flashVer) -t ($tcURL) -r ($tcUrl)/mfc_($ModelID) -p ($pageUrl)&objectEncoding=0 -C N:($SessionID) -C S:($Password) -C N:($ModelID) -C S:DOWNLOAD -C N:($RoomNumber) -o output.flv -v
Maybe someone could contribute a bash script with these infos.

- I have tested this as guest and as a registered member.
- It works with multiple streams.
- I don't know if it works in group or premium, and I don't intend to test that. If you pay for one of this service, the connection will probably be closed to be established again on a new subdomain. Anyway don't share what you have recorded.

Edit: I'm stupid, "room number" and "ModelID" are almost the same, '10' is appended before.
You could easily know this number just by looking at the URL of a model picture, For example GlamourHottie profile picture:
Code:
http://img.myfreecams.com/photos2/400/4001347/avatar.300x300.jpg

Last edited by OSSRecording : 01-04-2011 at 06:27 PM.
Reply With Quote