This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi guys, I am needing help extracting a playable URL/Stream from this: http://embed.wildearth.tv:8080/cam/dju-waterhole-02.stream?aspectratio=16:9&sourceid=101-101-122-125-11&autostart=true. I followed the most excellent tutorial here: https://ask.wireshark.org/questions/29730/wireshark-filter-for-finding-url-of-live-stream-video and ran into a big dead end.

I see most ( vast majority )packets are coming from one IP after I sorted based on packets. When I look at Conversations -> TCP, to try to see the header and extract a URL I see this ( it's snipped of course ).

H.&{../....play.............mp4:dju-waterhole-02.stream........................"........onStatus.............level...status..code...NetStream.Play.Stop..description..ZStopped playing wowz://206.190.136.148:1935/rtsp-ingest/_definst_/dju-waterhole-02.stream...clientid.A..D......reason.....details..Iwowz://206.190.136.148:1935/rtsp-ingest/_definst_/dju-waterhole-02.stream..  .................................onStatus.............level...status..code...NetStream.Play.Reset..description..`Playing and resetting wowz://206.190.136.148:1935/rtsp-ingest/_definst_/dju-waterhole-02.stream...clientid.A..D......  ...............onStatus.............level...status..code...NetStream.Play.Start..description..ZStarted playing wowz://206.190.136.148:1935/rtsp-ingest/_definst_/dju-waterhole-02.stream...clientid.A..D.....
isFastPlay....timecodeOffset...3962530061L..    E..........|RtmpSampleAccess..........,........onStatus...code...NetStream.Data.Start.. ............. ....E.........
onMetaData...videocodecid...avc1.
[email protected]
[email protected]@[email protected]
audiodatarate.@P....... trackinfo
......  [email protected]
......
sampletype...H264.. ..type...video..    ..  [email protected]@.......language...eng..sampledescription
......
sampletype..
MPEG4-GENERIC.. ..type...audio..config...1410..description..W{AACFrame: codec:AAC, channels:2, frequency:16000, samplesPerFrame:1024, objectType:LC}..  ..rtpsessioninfo...information...rtsp-server..name...Session streamed with GStreamer..origin..+- 1188340656180883 1 IN IP4 192.168.123.252..timing...0 0..protocolversion...0.
attributes...range...npt=now-..tool..   GStreamer..type..   broadcast.. ..  ..  ......& ..........M.)....gM.)..
..`[email protected]@xx.....h.<.F......   W.......6   [email protected]

After going back to the main Wireshark window and sorting by RTMP, I did discover this...

24  3.617806    192.168.1.2 206.190.138.100 RTMP    121 play('mp4:dju-waterhole-02.stream')

But I'm not sure if that's helpful either. Does anyone have any pointers to send me in the right direction?

Many thanks H.S.

asked 17 Aug '16, 14:35

hiromitsu_shinaka's gravatar image

hiromitsu_sh...
6112
accept rate: 0%

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×29
×29
×26

question asked: 17 Aug '16, 14:35

question was seen: 830 times

last updated: 17 Aug '16, 14:35

p​o​w​e​r​e​d by O​S​Q​A