My sister wanted me to save http://esewingworkshop.com/video-lesson/overview-zipper-types flash video and amp; a couple more for offline viewing and asked me how to save it.
I immediately released firebug in firefox, but surprisingly the video source is not in requests. http://hwcdn.net/m7n9i8d5/fms/videos/5_Standard_Zipper/B_Overview_of_Zipper_Types.flv.smil is the last request that is made. answer:
<smil> <head> <meta base="rtmp://fms006.lo1.hwcdn.net/m7n9i8d5/_definst_"> </head> <body> <video src="fms/videos/5_Standard_Zipper/B_Overview_of_Zipper_Types?doppl=965d6485db1d06d2&dopsig=867922856d781b57521a1dd3f7c28c5b"></video> </body> </smil>
So, I am using the rtmp streaming protocol. I tried to find out the source of this thread. I used "wirehark" and analyzed traffic and monitored TCP Stream
POST http://fms006.lo1.hwcdn.net/fcs/ident2 HTTP / 1.1
Content-Type: application / x-fcs
User-Agent: Shockwave Flash
Host: fms035.lo1.hwcdn.net
Content-Length: 1
Proxy-Connection: Keep-Alive
Pragma: no-cache
HTTP / 1.1 200 OK
Cache-control: no-cache
Connection: Keep-Alive
Content-Length: 14
Server: FlashCom / 3.5.5
Content-Type: text / plain
209.197.11.150POST http://209.197.11.219/open/1 HTTP / 1.1
Content-Type: application / x-fcs
User-Agent: Shockwave Flash
Host: 209.197.11.219
Content-Length: 1
Proxy-Connection: Keep-Alive
Pragma: no-cache
HTTP / 1.1 200 OK
Cache-control: no-cache
Connection: Keep-Alive
Content-Length: 17
Server: FlashCom / 3.5.5
Content-Type: application / x-fcs
Wubmcmj7Q1T-6Tic
POST http://209.197.11.219/idle/Wubmcmj7Q1T-6Tic/0 HTTP / 1.1
Content-Type: application / x-fcs
User-Agent: Shockwave Flash
Host: 209.197.11.219
Content-Length: 1
Proxy-Connection: Keep-Alive
Pragma: no-cache
HTTP / 1.1 200 OK
Cache-control: no-cache
Connection: Keep-Alive
Content-Length: 1
Server: FlashCom / 3.5.5
Content-Type: application / x-fcs
POST http://209.197.11.219/send/Wubmcmj7Q1T-6Tic/1 HTTP / 1.1
Content-Type: application / x-fcs
User-Agent: Shockwave Flash
Host: 209.197.11.219
Content-Length: 1537
Proxy-Connection: Keep-Alive
Pragma: no-cache
HTTP / 1.1 200 OK
Cache-control: no-cache
Connection: Keep-Alive
Content-Length: 3074
Server: FlashCom / 3.5.5
Content-Type: application / x-fcs
and these are the POST HTTP requests made by the shockwave player (plugin-containing .exe) in order
http://fms006.lo1.hwcdn.net/fcs/ident2
http://209.197.11.150/open/1
http://209.197.11.150/idle/2BZmcmj6mhTWexFa/0
http://209.197.11.150/send/2BZmcmj6mhTWexFa/1
http://209.197.11.150/send/2BZmcmj6mhTWexFa/2
http://209.197.11.150/idle/2BZmcmj6mhTWexFa/3
http://209.197.11.150/send/2BZmcmj6mhTWexFa/4
http://209.197.11.150/send/2BZmcmj6mhTWexFa/5
http://209.197.11.150/idle/2BZmcmj6mhTWexFa/6
_this continues till /407..._
I do not understand. Am I a little confused about how exactly this message comes about? I can not find the source of the video. As I understand it, from the SMIL request (the browser did this), having received the server address, and then shockwaveplayer takes over the connection and answers to these HTTP POST requests - this video is in pieces.
But how and where does he determine which video he wants? Where is RTMP? what url? How to download it?
claws source share