如何通过Wireshark抓取媒体流的播放的URL

Can one use wireshark to find the correct streaming url of a webradio, like http://www.chanson.ru/on-line.html? I would like to record their songs with audial one.

If one can find the url, how does one do it specifically (in detail please, I'm a newbie here)?

Thanks in advance gfheiche

url streaming

——————————————————————————————————–
Close all other applications, except the browser
Close all tabs in the browser, except the one that loads the web radio page
Capture the whole traffic of your system, while you listen to the radio stream. HINT: You must start the capture before you click on the "Play" button/link. Don't use any capture filter!
Look at the TCP statstics (Statistics -> Conversation List -> TCP)
Sort the out for "Bytes" or "Packets"
The connection with the most Bytes/Packets is most certainly the audio stream
Click on that connection and then click on "Follow Stream"
At the beginning of the TCP connection, you should see the URL (if it was streamed via HTTP).
Regards
Kurt
—————————————————————
Unfortunately, it did not give me the streaming url. It seems from the stations http://www.chanson.ru/on-line.html page source that it is written in java. Thank you very much for your detailed and clear help

Regards gfheiche

(08 Aug '12, 06:25)gfheiche
it is using a flash player (JW Player) to stream the music. The URL is:

http://chanson.cdnvideo.ru/rr/chanson.stream/playlist.m3u8
You can find it by using the following display filter:

http.request or http.response

then look into the HTML code to find the URL.

(08 Aug '12, 07:47)Kurt Knochner ♦
Hello Kurt, You solved the problem, thank you very much for your great help and patience Regards gfheiche

(09 Aug '12, 04:23)gfheiche
you are welcome. good luck with recording the music.

(09 Aug '12, 04:29)Kurt Knochner ♦
Hi. I'm looking for the URL, but it is using a flash player, when i look in the "Follow TPC stream" i get this:

GET /WRADIOAAC?uuid=bf9b2e80-e3cc-4f6b-9024-72d5c1c535b6 HTTP/1.1 Host: 3653.live.streamtheworld.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Referer: http://player.tritondigital.com/api/swf/tdplayer-api-1.0.swf?cb_1387476401319 Cookie: uuid=bf9b2e80-e3cc-4f6b-9024-72d5c1c535b6; a2x-an-uid=7425422285700592210 Connection: keep-alive

HTTP/1.0 200 OK Expires: Thu, 17 Jan 2031 16:00:00 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Content-Length: 2100000000 Set-Cookie: uuid=bf9b2e80-e3cc-4f6b-9024-72d5c1c535b6; expires=Sat, 22-Dec-2029 21:30:41 GMT; path=/; domain=.live.streamtheworld.com Content-Type: application/flv

I DONT SEE THE HTML CODE AFTER apply "http.request or http.response"

Thnks for the support, greeting from Colombia.