Show Posts
1
UrlSnooper / OTA program (URLSnooper and rtmpdump)
« on: November 19, 2009, 02:45 PM »
Hello,
I'm a little new to this, so forgive me. I'd like to capture a program (a Net replay of what was on a local ATSC station) and enjoy it later. One copy, like a book (legal in US). I'm reading quite a bit on this topic but I need help understanding it (also, it is only on the network's website for a limited time).
When I right-click on the media (while playing) I learn that Flash player is playing, but of course there is no option to save the program. When I click outside the playing window (but inside the browser window) I have the option to save a couple of commercials that came before the program, and I think I saved them correctly (they don't have the protection the program does). So it is probably flash. But using a sniffer and whatnot, the .flv file I got (for what I thought was the actual program) is only about 20K. Clearly this is going to be harder than I thought.
I think the media file is NOT in my browser cache (just like when I paid to see a web page with my credit score on it -- I could print, etc. and save the page to my hard drive, but the credit score number was not there. There must be a "no cache" option, and it's probably being used). So putting the drive in another machine and using an undelete program will probably not find it.
URLSnooper gave me some results, and I'm afraid I need your help to interpret them to give them to rtmpdump.
Player -- I thought that was the flash player on my local hard drive. But maybe it is the "***VideoApp.swf" on the XXX network's web site (ABC, FOX, NBC, CBS, whatever). Or maybe "mediaplayer.swf" at a third party site. Which is it?
Authentication -- I am lost. The only authentication I know about is HTTPS, WEP and WPA (never used PGP or GPG). What do they mean? Do I look for a specific cookie or file with a certain extension to find out more? Will this even be an issue?
Port -- I assume it played on port 80, for normal http traffic. Although there are lists of common ports out there, and flash could have a different default port.
File name -- This is going to be hard. Really hard. I thought I knew it, and downloaded the .swf file, but it was only about 20K. For a 42-minute program, this was clearly the wrong file.
Also, the sniffed items show many "GET" protocol things (html, xml, jpeg, gif and more). Do any of these fetch authentication tokens, etc. that I need for it to work?
And what is "playpath"? The path to the player (XXXplayer or mediaplayer.swf)?
I am running Firefox 3.5.2 on XP 64-bit. I also have 64-bit Mandriva (2008.1, 2009.1). I am not afraid of the command line AT ALL, but I suspect Windows tools will be better developed and easier to use for this.
Any help is greatly appreciated.
I'm a little new to this, so forgive me. I'd like to capture a program (a Net replay of what was on a local ATSC station) and enjoy it later. One copy, like a book (legal in US). I'm reading quite a bit on this topic but I need help understanding it (also, it is only on the network's website for a limited time).
When I right-click on the media (while playing) I learn that Flash player is playing, but of course there is no option to save the program. When I click outside the playing window (but inside the browser window) I have the option to save a couple of commercials that came before the program, and I think I saved them correctly (they don't have the protection the program does). So it is probably flash. But using a sniffer and whatnot, the .flv file I got (for what I thought was the actual program) is only about 20K. Clearly this is going to be harder than I thought.
I think the media file is NOT in my browser cache (just like when I paid to see a web page with my credit score on it -- I could print, etc. and save the page to my hard drive, but the credit score number was not there. There must be a "no cache" option, and it's probably being used). So putting the drive in another machine and using an undelete program will probably not find it.
URLSnooper gave me some results, and I'm afraid I need your help to interpret them to give them to rtmpdump.
Player -- I thought that was the flash player on my local hard drive. But maybe it is the "***VideoApp.swf" on the XXX network's web site (ABC, FOX, NBC, CBS, whatever). Or maybe "mediaplayer.swf" at a third party site. Which is it?
Authentication -- I am lost. The only authentication I know about is HTTPS, WEP and WPA (never used PGP or GPG). What do they mean? Do I look for a specific cookie or file with a certain extension to find out more? Will this even be an issue?
Port -- I assume it played on port 80, for normal http traffic. Although there are lists of common ports out there, and flash could have a different default port.
File name -- This is going to be hard. Really hard. I thought I knew it, and downloaded the .swf file, but it was only about 20K. For a 42-minute program, this was clearly the wrong file.
Also, the sniffed items show many "GET" protocol things (html, xml, jpeg, gif and more). Do any of these fetch authentication tokens, etc. that I need for it to work?
And what is "playpath"? The path to the player (XXXplayer or mediaplayer.swf)?
I am running Firefox 3.5.2 on XP 64-bit. I also have 64-bit Mandriva (2008.1, 2009.1). I am not afraid of the command line AT ALL, but I suspect Windows tools will be better developed and easier to use for this.
Any help is greatly appreciated.