View Single Post
  #15  
Old 05-10-2011, 09:00 AM
placebo placebo is offline
Moderator - exTerminator
 
Join Date: Aug 2010
Posts: 477
placebo is on a distinguished road
Default

Re: RTMFP or some??


Quote:
Originally Posted by sam4037 View Post
How did you know to include stream.php in the filter as well as search for http.request.uri? Can you perhaps explain what makes you decide what filter to use? Normally I would go with the rtmpt filter.
Good question. From now on, normally i will go with a simple PHP filter, both in CooJah settings and in Wireshark. PHP server scripts seem to play a crucial role in (non-standard) streaming tasks as the history of a couple of recent SRF stream recording problems has shown. Maybe it's an idea to start with Coojah to get the broad picture. Then from examining the various tabs (captured url's) we'd focus on url's with common sense keywords ("php", "video", "stream", "play", ..). Finally those keywords can be entered as filter in Wireshark to examine the url in more detail ("Follow TCP Stream").



That involves quite some time and efforts .. so i'd follow this path of workflow only when my GetFLV fails to get some result.. which is rather rare these days.

@getflv
please could you look into it? chap would love to see GetFLV supporting this TV site!
Reply With Quote