Challenge: decode stream url & token from wireshark logs

[benstewart]

Hi,

I'm probably close to get the right rtmp stream from the wireshark log above (tcp stream got when starting to play the stream in the browser) but I can't figure it out.

For example, which of the following urls is the good one?

rtmp://185.39.11.50:1735/vod?token=play@141867678301507

or

 rtmp://stream.dinozap.tv:190/vod/_definst_/jerkoooo_7w4bxhm

I've got the securetoken "wowk" found in http://www.playerhd2.pw/embed.php[...]. But I couldn't play the stream with rtmpdump, it keeps connecting.

Can anyone help me get the right url/token and the appropriate rtmpdump cmd? I would be SO grateful, after tens of hours scratching my head on this.

Ben

Wireshark log:

app...vod?token=play@141867678301507..flashVer...LNX 14,0,0,177..swfUrl..?http://www.spasswitz.com/jwplaye.r5/addplayer/jwplayer.flash.swf..tcUrl..7rtmp://185.39.11.50:1735/vod?token=play@141867678301507..fpad....capabilities.@m.........audioCodecs.@.........videoCodecs.@o.......
videoFunction.?.........pageUrl...http://www.playerhd2.pw/embed.php?c=28128&width=6.40&height=360&autostart=true&tk1=sn4WSXP%2Fp8XsII3DOMbwVRqHrw%2F22BL7q0Q4kw6hHPg%3D&tk2=6xuruBy80vR%2BIGKfSw1GYMyrFQTJaUEORTttWZ.md4%2Bc%3D&tk3=mjBe441UKwCthV6aca5WMXNN0aPx4%2FENUtmg9VWq5UI%3D..objectEncoding.........................&%..............&%..................................................._result.?..........fmsVer...FMS/3,5,5,2004..capabilities.@?........mode.?.............level...status..code...NetConnection.Connect.Success..description...Connection succeeded...data.......version..
3,5,5,2004.....clientid.A...z.....objectEncoding.........................&%....W...........createStream.@........B.....
.........................._result.@.........?..........X..$........play.............jerkoooo_7w4bxhm............................................onStatus.............level...status..code...NetStream.Play.Reset..description..RPlaying and resetting rtmp://stream.dinozap.tv:190/vod/_definst_/jerkoooo_7w4bxhm...clientid.A...z.....................onStatus.............level...status..code...NetStream.Play.Start..description..LStarted playing rtmp://stream.dinozap.tv:190/vod/_definst_/jerkoooo_7w4bxhm...clientid.A...z....
isFastPlay....timecodeOffset..
104356640L...E..........|RtmpSampleAccess..........,........onStatus...code...NetStream.Data.Start................ ....E.........
onMetaData...author.....copyright.....description.....keywords.....rating.....title....
presetname...Custom..creationdate...Sat Dec 13 20:12:44 2014..videodevice...XSplitBroadcaster..framerate.@>........width.@.........height.@v........videocodecid...avc1..avclevel.@>.......
avcprofile.@Y.......
videodatarate.@xj.......videokeyframe_frequency.?h.t.j~...audiodevice..
VHAudioCustom..audiosamplerate.@.@......
audiochannels.?.........audioinputvolume.@Y........audiocodecid.@&.......
audiodatarate.@;&......
bufferSize...500k.
maxBitrate...500k..xsplitBroadcasterVersion...1.3.0.238..xsplitCoreVersion...1.3.1403.1202 Version 1.3..xsplitGameSourceVersion...1.1.1.117..xsplitMediaLibVersion...2.0.0.324.
pluginName..
CustomRTMP.

Rtmpdump:

rtmpdump -r "rtmp://stream.dinozap.tv:190/vod/_definst_/jerkoooo_7w4bxhm" -a "flash" -W "http://www.spasswitz.com/jwplaye.r5/addplayer/jwplayer.flash.swf" -T "wowk" -o test.flv -z -v
RTMPDump v2.4
(c) 2010 Andrej Stepanchuk, Howard Chu, The Flvstreamer Team; license: GPL
ERROR: RTMP_HashSWF: swfurl http://www.spasswitz.com/jwplaye.r5/addplayer/jwplayer.flash.swf not found
DEBUG: Protocol : RTMP
DEBUG: Hostname : stream.dinozap.tv
DEBUG: Port     : 190
DEBUG: Playpath : jerkoooo_7w4bxhm
DEBUG: tcUrl    : rtmp://stream.dinozap.tv:190/flash
DEBUG: swfUrl   : http://www.spasswitz.com/jwplaye.r5/addplayer/jwplayer.flash.swf
DEBUG: app      : flash
DEBUG: live     : yes
DEBUG: timeout  : 30 sec
DEBUG: Setting buffer time to: 36000000ms
Connecting ...