Wireshark - 获取youtube的* .flv视频网址

时间:2013-06-14 17:36:06

标签: youtube wireshark

我正试图从任何youtube视频中获取* .flv的网址。我使用wireshark来分析流量。我还有一个firefox插件,可以从youtube下载视频。它有一个功能,我可以看到* .flv视频的直接网址。

到目前为止,我得到了这个:

http://r1---sn-i5onxoxu-i5hl.c.youtube.com(这是主持人)这与下载者网址相匹配。

接着是

“videoplayback?”然后我猜一些视频特定的东西。这正是我无法弄清楚的。下载程序从主机开始,然后是其他内容。

我所做的就是捕捉包裹。然后我在http请求中搜索“/ videoplayback?...”。我刚刚将它添加到主机但它不起作用。

有人能帮助我吗?主持人后我需要放什么?我在哪里可以找到它?

2 个答案:

答案 0 :(得分:3)

这是我到目前为止所发现的 我观看了相同的视频Wireshark - Using Dumpcap to capture to disk by Mike Pennacchi

捕获数据包并保存文件后,应用以下显示过滤器:
http.request.full_uri包含“范围”

我的档案中显示3个包:
735个
2708
4615

选择第一个数据包,转到数据包详细信息并展开超文本传输​​协议。 右键单击完整请求URI [截断]:并选择复制 - >将URL值并粘贴到文本文件中 从其他数据包中复制url(参见注释),你会得到一个与此类似的列表:

http://r2---sn-5hn7zn7k.c.youtube.com/videoplayback?algorithm=throttle-factor&burst=40&cp=U0hWR1FUTl9GT0NONl9JTlJBOlBwSjNTRTA0azVw&cpn=B84QkSbXB7EAaDfs&expire=1372190015&factor=1.25&fexp=935500%2C910100%2C929227%2C916613%2C921047%2C928201%2C901208%2C929123%2C929915%2C929906%2C929907%2C929125%2C925714%2C929917%2C929919%2C931202%2C912512%2C912515%2C912521%2C906838%2C904488%2C906840%2C931910%2C931913%2C932227%2C904830%2C919373%2C933701%2C904122%2C900816%2C926403%2C909421%2C912711%2C935102&id=6ca6b1fa4c861ff9&ip=my ip address&ipbits=8&itag=34&keepalive=yes&key=yt1&ms=au&mt=1372168727&mv=m&newshard=yes&range=13-1781759&ratebypass=yes&signature=D8D28CBCD4AAC5F46901397219F62CB04D3C6290.114129F2F93249AC4D88DF184C7D47C9929B3232&source=youtube&sparams=algorithm%2Cburst%2Ccp%2Cfactor%2Cid%2Cip%2Cipbits%2Citag%2Csource%2Cupn%2Cexpire&sver=3&upn=9RmkbstttTM
http://r2---sn-5hn7zn7k.c.youtube.com/videoplayback?algorithm=throttle-factor&burst=40&cp=U0hWR1FUTl9GT0NONl9JTlJBOlBwSjNTRTA0azVw&cpn=B84QkSbXB7EAaDfs&expire=1372190015&factor=1.25&fexp=935500%2C910100%2C929227%2C916613%2C921047%2C928201%2C901208%2C929123%2C929915%2C929906%2C929907%2C929125%2C925714%2C929917%2C929919%2C931202%2C912512%2C912515%2C912521%2C906838%2C904488%2C906840%2C931910%2C931913%2C932227%2C904830%2C919373%2C933701%2C904122%2C900816%2C926403%2C909421%2C912711%2C935102&id=6ca6b1fa4c861ff9&ip=my ip address&ipbits=8&itag=34&keepalive=yes&key=yt1&ms=au&mt=1372168727&mv=m&newshard=yes&range=1781760-3563519&ratebypass=yes&signature=D8D28CBCD4AAC5F46901397219F62CB04D3C6290.114129F2F93249AC4D88DF184C7D47C9929B3232&source=youtube&sparams=algorithm%2Cburst%2Ccp%2Cfactor%2Cid%2Cip%2Cipbits%2Citag%2Csource%2Cupn%2Cexpire&sver=3&upn=9RmkbstttTM
http://r2---sn-5hn7zn7k.c.youtube.com/videoplayback?algorithm=throttle-factor&burst=40&cp=U0hWR1FUTl9GT0NONl9JTlJBOlBwSjNTRTA0azVw&cpn=B84QkSbXB7EAaDfs&expire=1372190015&factor=1.25&fexp=935500%2C910100%2C929227%2C916613%2C921047%2C928201%2C901208%2C929123%2C929915%2C929906%2C929907%2C929125%2C925714%2C929917%2C929919%2C931202%2C912512%2C912515%2C912521%2C906838%2C904488%2C906840%2C931910%2C931913%2C932227%2C904830%2C919373%2C933701%2C904122%2C900816%2C926403%2C909421%2C912711%2C935102&id=6ca6b1fa4c861ff9&ip=my ip address&ipbits=8&itag=34&keepalive=yes&key=yt1&ms=au&mt=1372168727&mv=m&newshard=yes&range=3563520-5347327&ratebypass=yes&signature=D8D28CBCD4AAC5F46901397219F62CB04D3C6290.114129F2F93249AC4D88DF184C7D47C9929B3232&source=youtube&sparams=algorithm%2Cburst%2Ccp%2Cfactor%2Cid%2Cip%2Cipbits%2Citag%2Csource%2Cupn%2Cexpire&sver=3&upn=9RmkbstttTM

检查范围;它是在这些长篇网址中:
范围= 13-1781759
范围= 1781760-3563519
范围= 3563520-5347327

复制第一个网址并将其粘贴到浏览器中 现在您可以下载并保存第一个文件videoplayback_Pennacchi01 重复第2部分和第3部分的步骤。

在播放文件之前,还有几个步骤 在hex editor中打开文件videoplayback_Pennacchi01。

The file starts with:
12 00 03 4B 00 00 00 00 00 00 00 02 00 0A 6F 6E  ...K..........on
Prepend the the FLV header: 
46 4C 56 01 05 00 00 00 09 00 00 00 00           FLV..........
Now the file looks like:
46 4C 56 01 05 00 00 00 09 00 00 00 00 12 00 03  FLV.............
4B 00 00 00 00 00 00 00 02 00 0A 6F 6E 4D 65 74  K..........onMet

将光标移动到文件01的末尾 打开文件02和03,将文件内容复制并粘贴到文件01中。 现在您已准备好播放视频。

注1 这些链接在一段时间后过期:expire = 1372190015
Convert Unix timestamp to Readable Date/time:星期二,2013年6月25日19:53:35 GMT

您还可以从捕获文件重建FLV文件 转到文件 - >导出对象 - > HTTP
寻找内容类型video / x-flv 选择第一个,点击另存为然后保存文件 另外还有两个部分 按顺序合并文件并添加FLV标题。

注2 过去很容易。应用显示过滤器(http.request.method ==“GET”)并从包含/get_video?video...的GET请求中获取URL。但事情发生了变化......

答案 1 :(得分:-1)

Here is my example:
http://www.youtube.com/watch?v=bKax-kyGH_k
Wireshark - Using Dumpcap to capture to disk by Mike Pennacchi

After capturing the packets apply a display filter:
http.request.full_uri

Select packet GET /url ... etc.
Go to the Packet Details Pane
Expand Hypertext Transfer Protocol
Right-click on [Full request URI... etc.
Select: Copy -> Value
Here is the url: 
http://www.google.nl/url?sa=t&rct=j&q=youtube%20mike%20pennacchi&source=web&cd=8&ved=0CEwQtwIwBw&url=http%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DbKax-kyGH_k&ei=YNe9UanuIKP20gWM_IHgCw&usg=AFQjCNHPhvADvMvjOeDiL9lmv1FVb2vRjA&bvm=bv.47883778,d.d2k