This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

streaming url

0

Can one use wireshark to find the correct streaming url of a webradio, like http://www.chanson.ru/on-line.html? I would like to record their songs with audial one.

If one can find the url, how does one do it specifically (in detail please, I'm a newbie here)?

Thanks in advance gfheiche

asked 07 Aug '12, 07:51

gfheiche's gravatar image

gfheiche
1111
accept rate: 0%


One Answer:

0
  1. Close all other applications, except the browser
  2. Close all tabs in the browser, except the one that loads the web radio page
  3. Capture the whole traffic of your system, while you listen to the radio stream. HINT: You must start the capture before you click on the "Play" button/link. Don't use any capture filter!
  4. Look at the TCP statstics (Statistics -> Conversation List -> TCP)
  5. Sort the out for "Bytes" or "Packets"
  6. The connection with the most Bytes/Packets is most certainly the audio stream
  7. Click on that connection and then click on "Follow Stream"
  8. At the beginning of the TCP connection, you should see the URL (if it was streamed via HTTP).

Regards
Kurt

answered 08 Aug '12, 04:01

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Unfortunately, it did not give me the streaming url. It seems from the stations http://www.chanson.ru/on-line.html page source that it is written in java. Thank you very much for your detailed and clear help

Regards gfheiche

(08 Aug '12, 06:25) gfheiche

it is using a flash player (JW Player) to stream the music. The URL is:

http://chanson.cdnvideo.ru/rr/chanson.stream/playlist.m3u8

You can find it by using the following display filter:

http.request or http.response

then look into the HTML code to find the URL.

(08 Aug '12, 07:47) Kurt Knochner ♦

Hello Kurt, You solved the problem, thank you very much for your great help and patience Regards gfheiche

(09 Aug '12, 04:23) gfheiche

you are welcome. good luck with recording the music.

(09 Aug '12, 04:29) Kurt Knochner ♦

Hi. I'm looking for the URL, but it is using a flash player, when i look in the "Follow TPC stream" i get this:

GET /WRADIOAAC?uuid=bf9b2e80-e3cc-4f6b-9024-72d5c1c535b6 HTTP/1.1 Host: 3653.live.streamtheworld.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Referer: http://player.tritondigital.com/api/swf/tdplayer-api-1.0.swf?cb_1387476401319 Cookie: uuid=bf9b2e80-e3cc-4f6b-9024-72d5c1c535b6; a2x-an-uid=7425422285700592210 Connection: keep-alive

HTTP/1.0 200 OK Expires: Thu, 17 Jan 2031 16:00:00 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Content-Length: 2100000000 Set-Cookie: uuid=bf9b2e80-e3cc-4f6b-9024-72d5c1c535b6; expires=Sat, 22-Dec-2029 21:30:41 GMT; path=/; domain=.live.streamtheworld.com Content-Type: application/flv

I DONT SEE THE HTML CODE AFTER apply "http.request or http.response"

Thnks for the support, greeting from Colombia.

(19 Dec '13, 10:34) Juankof Enri...

I got my url doing this, ty so much

http://14093.live.streamtheworld.com:80/CRP_PLAAAC_SC

http://planeta.pe/radioenvivo

  • GET /CRP_PLAAAC?banners=swf%2Cvpaid&uuid=f07a40e0-8721-4f1b-a6fb-aa0aa4e4bd3c HTTP/1.1

Host: 14093.live.streamtheworld.com

Connection: keep-alive User-Agent:

Mozilla/5.0 (Windows NT 10.0; WOW64)

AppleWebKit/537.36 (KHTML, like

Gecko) Chrome/51.0.2704.103

Safari/537.36 X-Requested-With:

ShockwaveFlash/22.0.0.192 Accept: /

Referer:

http://planeta.pe/radioenvivo

Accept-Encoding: gzip, deflate, sdch

Accept-Language: es,en;q=0.8,ko;q=0.6

Cookie:

uuid=f07a40e0-8721-4f1b-a6fb-aa0aa4e4bd3c

HTTP/1.0 200 OK Expires: Thu, 01 Dec

2003 16:00:00 GMT Cache-Control:

no-cache, must-revalidate Pragma:

no-cache

Access-Control-Allow-Methods: GET,

HEAD Access-Control-Allow-Origin: *

Access-Control-Allow-Credentials:

true Set-Cookie:

uuid=f07a40e0-8721-4f1b-a6fb-aa0aa4e4bd3c;

expires=Sat, 22-Dec-2029 21:30:41

GMT; path=/;

domain=.live.streamtheworld.com

Content-Type: application/flv

(28 Jun '16, 05:04) Milumon
showing 5 of 6 show 1 more comments