Using Wireshark Version 1.12.7 on Windows, after capture of UDP video stream packets, saving the video to a file may be done by:
After doing so, the .ts file may be opened in VLC. My question: Is there a way to accomplish the equivalent on a capture of http video stream? This DOESN'T work:
asked 29 Sep '15, 17:45  mfbaker |
One Answer:
Go to Edit > Preferences > Protocols > TCP. Enable "Allow subdissector to reassemble TCP streams." Then go to File > Export Objects > HTTP. Select the video stream, then click on "Save As" and save with an appropriate extension, .ts in the case of the stream extracted from the capture file you supplied. answered 30 Sep '15, 19:37  Jim Aragon Thank you very much, Jim -- your procedure worked! Wow, wireshark has such an amazingly number of capabilities -- kudos also to the wireshark developers! (30 Sep '15, 21:20) mfbaker Jim, just to follow up, I confirmed that "File -> Export Objects -> HTTP" on a http video stream with audio also worked great -- thanks again! (02 Oct '15, 10:04) mfbaker |
Couleur you provide us an example trace of the TCP case, in a public accessible place ?
Yes, here's an example capture of an http video stream: https://drive.google.com/file/d/0B1O8tPh9Cozjd1BFTzFzRWdhNGs/view?usp=sharing
When you click the link, a page will appear with a download button. Upon clicking the button, it should save as a file named "20150930_httpVideoStream.pcapng".
Thanks! -Mike
I was able to extract the video stream and play it, but there wasn't any audio. Was there audio in the original stream, or it was video only? If there wasn't any audio, then my procedure worked and I will post it. If there was audio, it wasn't present when I extracted the stream.
Thanks much, Jim! The capture I posted had no audio, so yes, please post your procedure.
Tomorrow I will try to post another capture with audio, just to make sure that will work, too.
-Mike