Extract rtmp stream from Wireshark capture

HansMayer · #1 03-21-2012, 06:15 AM

Hi,
I've captured a stream with wireshark. Now I want to extract the video from it, but all my tries failed. I've found a extract-rtmp-flv perl script here, but it can't read the dump either:

Code:

 Unexpected tcpdump header line, line 1:
?????A?iOz?

Any infos on this?

Bahman · #2 03-21-2012, 07:36 AM

Nothing useful, webpage link?

KSV · #3 03-21-2012, 07:50 AM

Quote:

Originally Posted by HansMayer

Hi,
I've captured a stream with wireshark. Now I want to extract the video from it, but all my tries failed. I've found a extract-rtmp-flv perl script here, but it can't read the dump either:

Code:

 Unexpected tcpdump header line, line 1:
?????A?iOz?

Any infos on this?

make sure that you save the caputre file in tcpdump format. any particular reason to use such obsolete way of capturing video? why don't you use rtmpsrv or rtmpsuck instead?

HansMayer · #4 03-21-2012, 09:16 AM

Quote:

Originally Posted by Bahman

Nothing useful, webpage link?

Of the file on my desktop? file:///Users/USERNAME/Desktop/capture.wireshark
Hope it helps.

Quote:

Originally Posted by KSV

make sure that you save the caputre file in tcpdump format. any particular reason to use such obsolete way of capturing video? why don't you use rtmpsrv or rtmpsuck instead?

I had that file already captured. I've tried to save the file as Wireshark/tcpdump/..., Modified tcpdump, Redhat 6.1 tcpdump, SuSE 6.3 tcpdump. None worked.

svnpenn · #5 03-21-2012, 04:18 PM

I dont think you get it. If you want help, INCLUDE THE LINK FROM THE WEBPAGE CONTAINING THE STREAM.

HansMayer · #6 03-21-2012, 06:13 PM

Quote:

Originally Posted by svnpenn

I dont think you get it. If you want help, INCLUDE THE LINK FROM THE WEBPAGE CONTAINING THE STREAM.

Well, you neither: You won't be able to recapture the stream from last night again.
I can use rtmpsuck on the currently playing stream myself, but that's not the issue here. Or did you want to show me something else?