Problem patch rtmp wireshark

babaman · #1 04-13-2015, 03:26 PM

Hi guys,

i'm having a problem using WireShark with the stream found here:

cricfree.tv/update/sky2ita.php

follow tcp stream:

Code:

..........G...MX....vD.`.1.0..N..f.....p.........u.\.....b.......3FX.DI,...8.}..&}....).e..*....H...{..A..h.n5B.Es..c......4......#c.F.\>....W.2gb.Wq..=.....ja..Y.~.._!.... ...-w...[.. .5.3QRk.+;S#3!...
P..tF.V*..vt..x..W.
.iH.+.i.1.(.f..|(.....0;...n.>..Fq...7?!...=.G..a...3..|.W.;@..(.
.H........s...W.|f...]fW5.....]E..^t.o..>.7.....g..C.l..Gw..<h.k.%S....O_...Na
k2
......(L...6....5.a.U.&}....D7E`.Y?......!.G..W{P)...h..
...U..L.k'....?...C].........sA...K..4.....6....R.e...8.N.c3l..Di..A...[....)..u..)#.....!.k..........O..._./..s...."..|..OP.@<...P.....l.Cp.$.u.Zm.:x50.[.7..t(....,D..1.7N.....7...A.V.yE...+....aYu..8...d..k....7K...W.&4&~.dP..$...=;.ry....}......G5.R:x f........+.!E.A\.......et.S.8..f=...?.y.b
...e.`?...t.K.B"........L.J.a`$2......".\\r
w...#/
Z..j,s...P...\y.I.v..N.V(.r.cX.1.AQ
..e%|.6o.)'.A^...A..."....:....1..V....`miPc.0....y&}....m[.QXh.G.....;..d....&.... .........q....Y.......Y....~....t.....3........ ..w...d...#....ur.....z.....3
..1BE=zm0+x`W...v.7.P..e5n.{....Rz.]Ix...^d..h.o|.Ta4*|(...........v."..,^..M.^{L.|y...1I......f.A.....>..t.RAj..~...4Eg...8..C............*.....I.c..jn.....=...~=q.[...j+....
#C.v......)1.....sMb.v....
F.<...>...0....4Y..P....x.....v...l
...;.KQ.]S6S...k9........wh...Ly..4.h....}.$....B..t.tT.._DV.Qi^.....*`|...9.j`.....~//
$'.3...s........S.<I.N...._...u.!...&ulI.....!...
......xZ..P...... .xV...[$........b%...r..a........=9....Y*@Z9K..?.u.%...%.Y......L..s.3..kk...J.........M.P....V...e.....YO..i..[...4a.+.....f\}......Z.*.....y.....Dr6.1.Pw.Xa.:..&.T.MJ.........BF[..t+e2..J.~...?@>a.Z........;.......t.AW..-k..i.Co...p-...+..M':}.m..})..Z
._... %.R!.7'.7#....9j..#.0.zM...~R..#[7.;e...^....#w[.......z.q.......yb..='L...s.j.O<......".(O.h.2.z).-d.d...vI.V..(.-%....-9..o.....7....<L.a....Oe...(..ES.q2............i.L.9a...\}.`,<....s.{..2
..n}T..N3!.3...z......W......I>..u%...rSB+.......}g...Ou.*.p..*,.E..!.......m1...B.,.SU..x.G.'..5.....1.k.t.;...T?8.^..gY.....<[.1t....=.L.0G..,T.7Zx......r..@...{
..c8...L.$m.....~..?{............8
...3.....k.8x.<.Tb.I...!Y...ZU.I.;,..".......+M.......R^r...fBeN!8....C...'+............[g..Y\@.Y..#;....Z.....$..I....<..IfZ..i.., +".....X......o+......9.]..O.
M..RMt!.F_.SK7......r~..h...,.g.....Q...m/A..}...xMl/!....I...+a.I..q..../..Pb{..r.....>?sP.....8R.H..K.?..a..OU...L..l.jr.r.....E.....W,.V\R...b.b_X...5.e.......q.?.w.5..)s.8P1..P.T..q.5..^7.......\....y.SUa........" .g..;E..O..M../=yG....m0>..;.<m7.1.............X.ca...C...e....c..]?..U....J.<......2...:.}..a...R(.............!.z.F.bj...].v%....
..7...;Ew`F4..BhD..h...`PhO...k...).2..i
.....R.TRC.Q.....3....[Zz...f....G5.9]!..r.YM._D).0...B...:.......4g.......h...o>^...-c..;...c.O....k ...f:.3^3v.!z.....X...vHU....).h........%...PI.I.ev............d..l..a.sJ-V.6..q.......E?.#..~...kx ..2............u...1.:.p.d...<3.C{f....Q.....[R.e.,.xv.........;..@,.20.....tA(..u..2..!......B}..P.W._.-Xd....._w.n.PDQKs..+.h..L..(j*..@.}.>..d..uw.)...3p...Z..J2......{.=..Y.m..G..u|.v].Xa..[P....q.. ......%a..}..y.p......c...3.9.o....A..|?g.
.....\K.....$~..V......`l..".ea..o..Az.....mm>-...{{...D..G..I.G..f.;.p.$.....I.X.../.....2....N..
TJ....u=.Is........HmU_X.{rE...9RI-.~..
..=..+#1.qR...y........Z.yb.xP.......^=.~f....-%.L..G.;....gx1(.4...+.+.H.S.._..1}p.b......J\.Y*f..I...6.....a..."4.X.....w
..Q.......(.[...r..d`..p...(2.<.0.g..?4]....v9.....Z..J.....5&....O>%....4.q.8G)N.S.p9..:}.....y8.e.A......C..........h^.<....=...W......`.`U.Nk.z...
.....:...,...?.}.d....]./.z.x0.......$..........{..(.G...}d..^.Vm&.....-..G..^&...KK@......Q...........K<.*.o.....O..)....F...Ns..qj0.gD{....G...M............
d.n.}5LT.....3'.....V.E..?
a.X....ix..'...OE5.4.a...........JH.....S.....cl!.O.8.y..N...+.../.s..O..>?Lepw.;...Q..@..;....b+x7...a.`....0.t.'....(....r..{7...F ?.....X..B...O=.1..Y.y.m.0.~H0#.|............h..o....PEW....Pe.!.. ..i\.. ."p,....e.t'.
..d..%AZ.55..m&x....N;.
.o......lFl.n.5...:.p..PD.{..pB...?h.P....b$.
...+.
..J.4 ./.igb.9..a.._.."..a...S..-....}M98.X.#o.v..oD..\...g.QW~..(...\.[1i...(..`h{|.....U...=......,]U..P..9L..b.._.v..lt...I.b...:....&\.....$R6OF......x-JP..7.1.5..../L.........`r.[I.......H..%I.D.....g.w...gQ......q..#.......x<.M}[.[.....M[..h.g...?.-...O........<.9....B.!.........../..|.QU.%..!4A......y.......q.&0&..N.....y...o...o.gY.NM$iOE...............
k'..C......M.........D...........).N1....6.>.....y..a..VkV....I#.u
..[ke."... ).H..F... ...@..........5....-8.....e5.z.YT....G.h.......Ka'X\.k+.(.s...>P.L.ae.3..Y....*......_." ..GY.0..=.Q ...V.......x....l.a:#I....N...4J...R..g..'8..+.m.............R...e6}../.7C.+..I.}L\h+j.4..1G&..`
.NV.Z..GyV ..S..a.C9.K..Io.N.....Zm.cL....%.......l...9.ei...W|`../..
.. Z.....................m.r..5>Z...B.7.....1[.........s....3...8....h.DH...JJ4..)
./...T...[.Xx.).Zw..|.......]0 ..<...:(..y.......vuK`..q..5(....{.jt.....[..V..&].m..ZR..S.1I.;.....rs@h.s..>8..|..
."U.....W.@Q..../5.[..."[nZ..b..;.....C...>..^..SS.D...g.6Z......M...{..v"..(...T]U.............?..%y.V......P...(....2...r...8x...u..l;...'6(..`/
.........v..X.X:.........u..fN.8........{..}E2L>k.o....dJ.9..I.V)-)=6..
...........s...(h._....H)..DW..D.3/C...T...<..S..NgI...P..;.E.hA7..zct.>V....6st.<.(Q#6..;....~L..m...K.4.A...fL.N...._ ...;.?..0xa.z...R^,9.......6.g..E.Y.$..r}cH../....D...Ck......`..w..._....L......:A.x....R.b.q..m..c&.../k,|...`..fu.......@.......U...Kx..U..c..8..1.3i.......pc.!d.......4.....r....4...h......>d..........`...w.9.2..f;Y.....XyV=.O.q....8..=..U.....v2"..|.t.R.......p.X
62.....OQu...2:n..g..sE.E....iD.:.......Z.~...F...k]d..L.M.I.w..l.#|..K[..#2Z..Kf..M.R...()..+........?.l....,..[u.....?.3.^...b...,Fk..G..L..R.Y..Q.$..z...1....U.qj..\u...W...T....8.3hQ6...5G....o..
3I`.|..0..j.T.v..Z.a1.$....w..........-.....C............9...J..=M.H...dm...E.......8w!.....{..6B.-X.*........g.80.:.V. M.Hf%..a~.WH..<.M5z..[._..
O..n\n..6.....P.....F./-t7.Ni.B..]....uD...^,b;.."\e..|{...a$n=.HV...d........Z..p|..71........_...S6...6.v.~?...d..|
..5....(...[......./X....Y(..#..s.#......Umb..Q....M=.R0.i<....:}.p>j..o...,....Z.{.._....@>@t....A.:.~*nl.0....+.}.I.....^..g...D...f......
s...4p._+tp.e.!.`..-.|.....'g..r..%?r0.Q.r4..GJS........h_.....c.^LTpy..(/.5.....f.V..@.}H........\........connect.?..........app...redirect/..flashVer...WIN 17,0,0,134..swfUrl..+http://p.jwpcdn.com/6/12/jwplayer.flash.swf..tcUrl....rtmp://31.220.0.206/redirect/..fpad....capabilities.@m........audioCodecs.@.........videoCodecs.@o.......
videoFunction.?..........pageUrl..4http://reytv.co/embedu.php?live=ss2ita&vw=620&vh=490..objectEncoding.........................&%..............&%..........................................:........_error.?...........level...error..code...NetConnection.Connect.Rejected..description..3Connection failed: Application rejected connection...ex...redirect...rtmp://41.242.151.6:80/live..code.@r...........clientid.A..LA.....secureToken..Hca4eb9eda119c3d34a4ac466563e1ee448ee9cf883d37be6bf5b2b27ae5b1c8d9f3ca464..................close.......................&%.

what I can see is this:

Code:

rtmp://41.242.151.6:80/live playpath=ss2ita swfUrl=http://p.jwpcdn.com/6/12/jwplayer.flash.swf live=1 
pageUrl=http://reytv.co/embedu.php?live=ss2ita&vw=620&vh=490

Missing the token, what mistake? you can help me?
thanks

joejones15 · #2 04-13-2015, 03:58 PM

delete this reply, hasomaso has correct answer below

hasomaso · #3 04-13-2015, 04:01 PM

when you run this code under cmd, add yet one %

Code:

-T "%%Zrey(nKa@#Z"

Code:

rtmpdump -v -r "rtmp://41.242.151.2:80/live" -a "live" -f "WIN 17,0,0,134" -W "http://p.jwpcdn.com/6/12/jwplayer.flash.swf" -p "http://reytv.co/embedo.php?live=ss2ita&vw=620&vh=490" -y "ss2ita" -T "%%Zrey(nKa@#Z" -o "output.flv"

Code:

RTMPDump v2.4 GIT-2015-01-15 (Compiled by KSV)
(c) 2010 Andrej Stepanchuk, Howard Chu, The Flvstreamer Team; license: GPL
WARNING: You haven't specified an output file (-o filename), using stdout
Connecting ...
INFO: Connected...
Starting Live Stream
INFO: Metadata:
INFO:   presetname              Custom
INFO:   creationdate            Sat Apr 04 10:18:52 2015
INFO:   videodevice             SAA7130 Analog TV Card
INFO:   framerate               29.97
INFO:   width                   620.00
INFO:   height                  360.00
INFO:   videocodecid            avc1
INFO:   videodatarate           350.00
INFO:   avclevel                41.00
INFO:   avcprofile              66.00
INFO:   videokeyframe_frequency 5.00
INFO:   audiodevice             Rear Input (SoundMAX Integrated
INFO:   audiosamplerate         22050.00
INFO:   audiochannels           2.00
INFO:   audioinputvolume        48.00
INFO:   audiocodecid            .mp3
INFO:   audiodatarate           64.00
11917.149 kB / 268.61 sec

babaman · #4 04-14-2015, 04:55 AM

thanks hasomaso,

but I use simpletv, as I can see the channel with simpletv?

I tried with rtmpdump, but I think this is a mistake

Code:

C:\RTMPDump>rtmpdump -v -r "rtmp://41.242.151.2:80/live" -a "live" -f "WIN 17,0,
0,134" -W "http://p.jwpcdn.com/6/12/jwplayer.flash.swf" -p "http://reytv.co/embe
do.php?live=ss2ita&vw=620&vh=490" -y "ss2ita" -T "%%Zrey(nKa@#Z" -o "output.flv"

RTMPDump v2.4 GIT-2013-12-05 (Compiled by KSV)
(c) 2010 Andrej Stepanchuk, Howard Chu, The Flvstreamer Team; license: GPL
Connecting ...
ERROR: RTMP_Connect0, failed to connect socket. 10060 (Unknown error)

C:\RTMPDump>

hasomaso · #5 04-14-2015, 06:03 AM

@babaman

you get the error message is because the host:port line has changed

old

Code:

rtmp://41.242.151.2:80/live

new

Code:

rtmp://93.158.217.202:80/live

Code:

rtmpdump -v -r "rtmp://93.158.217.202:80/live" -a "live" -f "WIN 17,0,0,134" -W "http://p.jwpcdn.com/6/12/jwplayer.flash.swf" -p "http://reytv.co/embedo.php?live=ss2ita&vw=620&vh=490" -y "ss2ita" -T "%%Zrey(nKa@#Z" -o "output.flv"

Code:

RTMPDump v2.4 GIT-2015-01-15 (Compiled by KSV)
(c) 2010 Andrej Stepanchuk, Howard Chu, The Flvstreamer Team; license: GPL
WARNING: You haven't specified an output file (-o filename), using stdout
Connecting ...
INFO: Connected...
Starting Live Stream
INFO: Metadata:
INFO:   presetname              Custom
INFO:   creationdate            Sat Apr 04 10:18:52 2015
INFO:   videodevice             SAA7130 Analog TV Card
INFO:   framerate               29.97
INFO:   width                   620.00
INFO:   height                  360.00
INFO:   videocodecid            avc1
INFO:   videodatarate           350.00
INFO:   avclevel                41.00
INFO:   avcprofile              66.00
INFO:   videokeyframe_frequency 5.00
INFO:   audiodevice             Rear Input (SoundMAX Integrated
INFO:   audiosamplerate         22050.00
INFO:   audiochannels           2.00
INFO:   audioinputvolume        48.00
INFO:   audiocodecid            .mp3
INFO:   audiodatarate           64.00
181.141 kB / 4.87 sec

################################################## #######################################

for simpeTv you can use that

Code:

rtmp://$OPT:rtmp-raw=rtmp://93.158.217.202:80/live app=live swfUrl=http://p.jwpcdn.com/6/12/jwplayer.flash.swf pageUrl=http://reytv.co/embedo.php?live=ss2ita&vw=620&vh=490 playpath=ss2ita token=%Zrey(nKa@#Z live=1

babaman · #6 04-14-2015, 09:32 AM

ok thanks now it all works

but how did you find the token?

joejones15 · #7 04-14-2015, 10:50 AM

Quote:

Originally Posted by babaman

but how did you find the token?

have you tried a decompiler yet?

babaman · #8 04-15-2015, 06:14 AM

no, I do not know that I have to follow the procedure
There is a guide? you can explain to me step by step?
thanks

joejones15 · #9 04-15-2015, 06:53 AM

Quote:

Originally Posted by babaman

no, I do not know that I have to follow the procedure
There is a guide? you can explain to me step by step?
thanks

1 - run wireshark like you did on capture

2 - run stream until it plays, then stop wireshark capture

3 - in wireshark, go EDIT>FIND A PACKET, then search like this:

4 - you will then see this:

5 - enjoy token