only flash information seen

[blanc2016]

Hello,

I just installed URL Snooper but it fails to extract video links at the very first time. All the outputs are shown below (Sorry for inconvenience). In them I saw many interactions of flash information. Do I have to analyze raw data to find out what is hidden in Javascript?

http://event.lvl3.on24.com/view/presentation/flash/EventConsoleNG.swf?version=03-03-2017%2005:33%20PM/[[DYNAMIC]]/4
http://event.lvl3.on24.com/view/presentation/flash/EventConsoleNG.swf
http://event.lvl3.on24.com/view/presentation/flash/EventConsoleNG.swf?version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/EventConsoleNG.swf?version=03-03-2017
http://event.lvl3.on24.com/view/presentation/flash/EventConsoleSkin1.swf
http://event.lvl3.on24.com/view/presentation/flash/TextAreaWidget.swf?mode=application&view=slide&version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/QandAWidget.swf?mode=application&view=slide&version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/ResourceListWidget.swf?mode=application&view=slide&version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/SpeakerBioWidget.swf?mode=application&view=slide&version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/MediaPlayerWidget.swf?mode=application&view=slide&version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/TwitterWidget.swf?mode=application&view=slide&version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/HelpWidget.swf?mode=admin&view=slide&version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/EmailFriendWidget.swf?mode=application&view=slide&version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/SurveyWidget.swf?mode=application&view=slide&version=03-03-2017%2005:33%20PM
http://event.lvl3.on24.com/view/presentation/flash/framework_4.6.0.23201.swf
http://event.lvl3.on24.com/view/presentation/flash/SpeakerBioWidget.swf?mode=application&view=slide&version=03-03-2017
http://event.lvl3.on24.com/view/presentation/flash/TwitterWidget.swf?mode=application&view=slide&version=03-03-2017
http://event.lvl3.on24.com/view/presentation/flash/textLayout_2.0.0.232.swf
http://event.lvl3.on24.com/utils/flash/slideLoader.swf?slide=http://event.lvl3.on24.com/event/12/96/55/1/rt/1/slide/slide/1_86D1B79530442B8E010D9F1B6C0E2F8C.swf&connectionName=_lc1491704583379
http://event.lvl3.on24.com/event/12/96/55/1/rt/1/slide/slide/1_86D1B79530442B8E010D9F1B6C0E2F8C.swf
http://event.lvl3.on24.com/utils/flash/slideLoader.swf?slide=http://event.lvl3.on24.com/event/12/96/55/1/rt/1/slide/slide/1_86D1B79530442B8E
http://event.lvl3.on24.com/view/presentation/flash/SurveyWidget.swf?mode=application&view=slide&version=03-03-2017
rtmp://cp79003.edgefcs.net:1935/ondema
http://event.lvl3.on24.com/utils/flash/slideLoader.swf?slide=http://event.lvl3.on24.com/event/12/96/55/1/rt/1/slide/slide/1_86D1B79530442B8E010D9F1B6C0E2F8C.swf&connectionName=_lc1491704593962
rtmp://cp79003.edgefcs.net:1935/ondemand/odflv/media/cv
http://event.lvl3.on24.com/utils/flash/slideLoader.swf?slide=http://event.lvl3.on24.com/event/12/96/55/1/rt/1/slide/slide/1_86D1B79530442B8E010D9F1B6C0E2F8C.swf&connectionName=_lc1491704614072
http://event.lvl3.on24.com/utils/flash/slideLoader.swf?slide=http://event.lvl3.on24.com/event/12/96/55/1/rt/1/slide/slide2/1_59383EB8A9773CCE9B1B5CFDA1B4C7EA.swf&connectionName=_lc1491704618182
http://event.lvl3.on24.com/event/12/96/55/1/rt/1/slide/slide2/1_59383EB8A9773CCE9B1B5CFDA1B4C7EA.swf
http://event.lvl3.on24.com/utils/flash/slideLoader.swf?slide=http://event.lvl3.on24.com/event/12/96/55/1/rt/1/slide/slide2/1_59383EB8A9773CC
Krtmp://_defaultRoot_/_defaultVHost_/CP79003.S135.0_ondemand/_definst_/odflv

Blanc

[blanc2016]

I just read some threads in this forum. It seems to me that I should concentrate on rtmp messages in this case. Could anybody just tell me if this is the correct direction to go?

Blanc

[mouser]

Hi Blanc.

That is the right direction.. The problem can be that flash swf video can be compressed and sent in a way that makes URL Snooper not helpful..

[techidave]

Hi Blanc.

That is the right direction.. The problem can be that flash swf video can be compressed and sent in a way that makes URL Snooper not helpful..

Is there a solution that can see this type of traffic?