~/rtmpdump$ sudo iptables -t nat -A OUTPUT -p tcp --dport 1935 -m owner \! --uid-owner proxy -j REDIRECT ~/rtmpdump$ sudo -u proxy ./rtmpsuck -zRTMP Proxy Server v2.1 (c) 2009 Andrej Stepanchuk, Howard Chu; license: GPL Streaming on rtmp://0.0.0.0:1935 DEBUG: serverThread: accepted connection from 192.168.1.100 to 95.140.226.90 DEBUG: SHandShake: Type Requested : 03 DEBUG: SHandShake: Client Uptime : 296880 DEBUG: SHandShake: Player Version: -128.0.3.2 DEBUG: SHandShake: Handshaking finished.... INFO: RTMP_ReadPacket: fd=4 0000: 03 00 00 00 00 03 5c 14 00 00 00 00 ......\..... 0000: 02 00 07 63 6f 6e 6e 65 63 74 00 3f f0 00 00 00 ...connect.?.... 0010: 00 00 00 03 00 03 61 70 70 02 00 5d 61 35 30 30 ......app..]a500 0020: 2f 64 38 3f 76 69 64 65 6f 49 64 3d 35 35 35 37 /d8?videoId=5557 0030: 37 32 39 37 30 30 31 26 6c 69 6e 65 55 70 49 64 7297001&lineUpId 0040: 3d 26 70 75 62 49 64 3d 35 39 31 32 31 26 70 6c =&pubId=59121&pl 0050: 61 79 65 72 49 64 3d 31 37 39 34 39 37 37 30 39 ayerId=179497709 0060: 31 26 70 6c 61 79 65 72 54 61 67 3d 26 61 66 66 1&playerTag=&aff 0070: 69 6c 69 61 74 65 49 64 3d 00 08 66 6c 61 73 68 iliateId=..flash INFO: RTMP_ReadPacket: fd=4 0000: c3 . 0000: 56 65 72 02 00 0e 4c 4e 58 20 31 30 2c 30 2c 34 Ver...LNX 10,0,4 0010: 32 2c 33 34 00 06 73 77 66 55 72 6c 02 00 a8 68 2,34..swfUrl...h 0020: 74 74 70 3a 2f 2f 61 64 6d 69 6e 2e 62 72 69 67 ttp://admin.brig 0030: 68 74 63 6f 76 65 2e 63 6f 6d 2f 76 69 65 77 65 htcove.com/viewe 0040: 72 2f 75 73 31 2e 32 32 2e 30 32 2e 30 33 2f 66 r/us1.22.02.03/f 0050: 65 64 65 72 61 74 65 64 56 69 64 65 6f 2f 42 72 ederatedVideo/Br 0060: 69 67 68 74 63 6f 76 65 50 6c 61 79 65 72 2e 73 ightcovePlayer.s 0070: 77 66 3f 69 73 56 69 64 3d 31 26 66 6c 61 73 68 wf?isVid=1&flash INFO: RTMP_ReadPacket: fd=4 0000: c3 . 0000: 49 44 3d 6e 75 6c 6c 26 70 6c 61 79 65 72 57 69 ID=null&playerWi 0010: 64 74 68 3d 30 26 70 6c 61 79 65 72 48 65 69 67 dth=0&playerHeig 0020: 68 74 3d 2d 33 32 26 70 6c 61 79 65 72 49 44 3d ht=-32&playerID= 0030: 31 37 39 34 39 37 37 30 39 31 26 64 6f 6d 61 69 1794977091&domai 0040: 6e 3d 65 6d 62 65 64 00 05 74 63 55 72 6c 02 00 n=embed..tcUrl.. 0050: 86 72 74 6d 70 3a 2f 2f 62 72 69 67 68 74 63 6f .rtmp://brightco 0060: 76 65 2d 35 35 2e 66 63 6f 64 2e 6c 6c 6e 77 64 ve-55.fcod.llnwd 0070: 2e 6e 65 74 3a 31 39 33 35 2f 61 35 30 30 2f 64 .net:1935/a500/d INFO: RTMP_ReadPacket: fd=4 0000: c3 . 0000: 38 3f 76 69 64 65 6f 49 64 3d 35 35 35 37 37 32 8?videoId=555772 0010: 39 37 30 30 31 26 6c 69 6e 65 55 70 49 64 3d 26 97001&lineUpId=& 0020: 70 75 62 49 64 3d 35 39 31 32 31 26 70 6c 61 79 pubId=59121&play 0030: 65 72 49 64 3d 31 37 39 34 39 37 37 30 39 31 26 erId=1794977091& 0040: 70 6c 61 79 65 72 54 61 67 3d 26 61 66 66 69 6c playerTag=&affil 0050: 69 61 74 65 49 64 3d 00 04 66 70 61 64 01 00 00 iateId=..fpad... 0060: 0c 63 61 70 61 62 69 6c 69 74 69 65 73 00 40 2e .capabilities.@. 0070: 00 00 00 00 00 00 00 0b 61 75 64 69 6f 43 6f 64 ........audioCod INFO: RTMP_ReadPacket: fd=4 0000: c3 . 0000: 65 63 73 00 40 a8 ee 00 00 00 00 00 00 0b 76 69 ecs.@.........vi 0010: 64 65 6f 43 6f 64 65 63 73 00 40 6f 80 00 00 00 deoCodecs.@o.... 0020: 00 00 00 0d 76 69 64 65 6f 46 75 6e 63 74 69 6f ....videoFunctio 0030: 6e 00 3f f0 00 00 00 00 00 00 00 07 70 61 67 65 n.?.........page 0040: 55 72 6c 02 00 6a 68 74 74 70 3a 2f 2f 77 77 77 Url..jhttp://www 0050: 2e 6d 65 74 61 63 61 66 65 2e 63 6f 6d 2f 77 61 .metacafe.com/wa 0060: 74 63 68 2f 73 79 2d 35 35 35 37 37 32 39 37 30 tch/sy-555772970 0070: 30 31 2f 73 68 61 6b 69 72 61 5f 64 69 64 5f 69 01/shakira_did_i INFO: RTMP_ReadPacket: fd=4 0000: c3 . 0000: 74 5f 61 67 61 69 6e 5f 66 65 61 74 75 72 69 6e t_again_featurin 0010: 67 5f 6b 69 64 5f 63 75 64 69 5f 6f 66 66 69 63 g_kid_cudi_offic 0020: 69 61 6c 5f 6d 75 73 69 63 5f 76 69 64 65 6f 2f ial_music_video/ 0030: 00 0e 6f 62 6a 65 63 74 45 6e 63 6f 64 69 6e 67 ..objectEncoding 0040: 00 00 00 00 00 00 00 00 00 00 00 09 01 00 02 00 ................ 0050: 8b 6d 65 64 69 61 2f 32 35 39 33 38 35 39 35 30 .media/259385950 0060: 30 31 2f 32 35 39 33 38 35 39 35 30 30 31 5f 35 01/25938595001_5 0070: 32 36 33 34 35 37 34 30 30 31 5f 30 30 30 30 30 2634574001_00000 INFO: RTMP_ReadPacket: fd=4 0000: c3 . 0000: 30 30 30 30 30 30 30 32 31 37 32 33 30 32 32 2d 000000021723022- 0010: 6d 70 34 2d 74 79 70 65 31 37 35 2d 61 31 36 30 mp4-type175-a160 0020: 2d 76 31 35 30 30 2d 32 63 2d 76 62 72 26 31 32 -v1500-2c-vbr&12 0030: 36 30 33 38 31 36 30 30 30 30 30 26 31 66 61 63 60381600000&1fac 0040: 61 36 39 61 38 65 66 66 63 66 37 62 39 39 33 37 a69a8effcf7b9937 0050: 34 61 35 63 66 66 37 66 65 32 37 63 4a5cff7fe27c DEBUG: ServePacket, received packet type 14, size 860 bytes DEBUG: ServePacket, received: invoke 860 bytes DEBUG: (object begin) DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: (object begin) DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: Property: DEBUG: (object end) DEBUG: Property: DEBUG: Property: DEBUG: (object end) DEBUG: ServeInvoke, client invoking Processing connect app: a500/d8?videoId=55577297001&lineUpId=&pubId=59121&playerId=1794977091&playerTag=&affiliateId= flashVer: LNX 10,0,42,34 swfUrl: http://admin.brightcove.com/viewer/us1.22.02.03/federatedVideo/BrightcovePlayer.swf?isVid=1&flashID=null&playerWidth=0&playerHeight=-32&playerID=1794977091&domain=embed tcUrl: rtmp://brightcove-55.fcod.llnwd.net:1935/a500/d8?videoId=55577297001&lineUpId=&pubId=59121&playerId=1794977091&playerTag=&affiliateId= pageUrl: http://www.metacafe.com/watch/sy-55577297001/shakira_did_it_again_featuring_kid_cudi_official_music_video/ DEBUG: RTMP_Connect, ... connected, handshaking DEBUG: HandShake: Client type: 03 DEBUG: HandShake: Client digest offset: 580 DEBUG: HandShake: Initial client digest: 9D F8 B3 66 5B 47 AF 66 9B A3 AB 5B 20 91 49 54 40 10 E4 51 61 2F 5C ED 70 94 B7 59 18 7A C5 66 DEBUG: HandShake: Type Answer : 03 DEBUG: HandShake: Server Uptime : 931950446 DEBUG: HandShake: FMS Version : 3.5.2.1 WARNING: Trying different position for server digest! DEBUG: HandShake: Server DH public key offset: 878 DEBUG: HandShake: Calculated digest key from secure key and server digest: 1D BC CC B8 88 FB 81 A4 F3 7A FC A1 05 05 12 7F 15 86 5E 8B AF A5 2C 6F 72 B8 2B 3C 19 22 10 7F DEBUG: HandShake: Client signature calculated: 4F F5 F2 14 8B A4 73 5C 53 FF 9A 19 EB 90 0F 4C 59 E5 B4 35 BF 80 16 52 F9 E9 91 A3 39 57 E3 9C DEBUG: HandShake: Server sent signature: 2D 41 3B 41 26 F8 8E 5D 8E 48 18 AD F8 03 34 66 0A 66 88 14 E4 D9 DB F6 78 8A D4 CC DF 35 71 B4 DEBUG: HandShake: Digest key: 89 07 51 23 C2 C6 1F B7 80 A3 6E E6 67 B7 9C 6B BD 8B 8C D6 23 5D A5 8D 3B AB 79 3B ED 2C 81 5C DEBUG: HandShake: Signature calculated: 2D 41 3B 41 26 F8 8E 5D 8E 48 18 AD F8 03 34 66 0A 66 88 14 E4 D9 DB F6 78 8A D4 CC DF 35 71 B4 DEBUG: HandShake: Genuine Adobe Flash Media Server DEBUG: HandShake: Handshaking finished.... DEBUG: RTMP_Connect, handshaked INFO: RTMP_SendPacket: fd=6, size=691 0000: 03 00 00 00 00 02 b3 14 00 00 00 00 ............ 0000: 02 00 07 63 6f 6e 6e 65 63 74 00 3f f0 00 00 00 ...connect.?.... 0010: 00 00 00 03 00 03 61 70 70 02 00 5d 61 35 30 30 ......app..]a500 0020: 2f 64 38 3f 76 69 64 65 6f 49 64 3d 35 35 35 37 /d8?videoId=5557 0030: 37 32 39 37 30 30 31 26 6c 69 6e 65 55 70 49 64 7297001&lineUpId 0040: 3d 26 70 75 62 49 64 3d 35 39 31 32 31 26 70 6c =&pubId=59121&pl 0050: 61 79 65 72 49 64 3d 31 37 39 34 39 37 37 30 39 ayerId=179497709 0060: 31 26 70 6c 61 79 65 72 54 61 67 3d 26 61 66 66 1&playerTag=&aff 0070: 69 6c 69 61 74 65 49 64 3d 00 08 66 6c 61 73 68 iliateId=..flash 0000: c3 . 0000: 56 65 72 02 00 0e 4c 4e 58 20 31 30 2c 30 2c 34 Ver...LNX 10,0,4 0010: 32 2c 33 34 00 06 73 77 66 55 72 6c 02 00 a8 68 2,34..swfUrl...h 0020: 74 74 70 3a 2f 2f 61 64 6d 69 6e 2e 62 72 69 67 ttp://admin.brig 0030: 68 74 63 6f 76 65 2e 63 6f 6d 2f 76 69 65 77 65 htcove.com/viewe 0040: 72 2f 75 73 31 2e 32 32 2e 30 32 2e 30 33 2f 66 r/us1.22.02.03/f 0050: 65 64 65 72 61 74 65 64 56 69 64 65 6f 2f 42 72 ederatedVideo/Br 0060: 69 67 68 74 63 6f 76 65 50 6c 61 79 65 72 2e 73 ightcovePlayer.s 0070: 77 66 3f 69 73 56 69 64 3d 31 26 66 6c 61 73 68 wf?isVid=1&flash 0000: c3 . 0000: 49 44 3d 6e 75 6c 6c 26 70 6c 61 79 65 72 57 69 ID=null&playerWi 0010: 64 74 68 3d 30 26 70 6c 61 79 65 72 48 65 69 67 dth=0&playerHeig 0020: 68 74 3d 2d 33 32 26 70 6c 61 79 65 72 49 44 3d ht=-32&playerID= 0030: 31 37 39 34 39 37 37 30 39 31 26 64 6f 6d 61 69 1794977091&domai 0040: 6e 3d 65 6d 62 65 64 00 05 74 63 55 72 6c 02 00 n=embed..tcUrl.. 0050: 86 72 74 6d 70 3a 2f 2f 62 72 69 67 68 74 63 6f .rtmp://brightco 0060: 76 65 2d 35 35 2e 66 63 6f 64 2e 6c 6c 6e 77 64 ve-55.fcod.llnwd 0070: 2e 6e 65 74 3a 31 39 33 35 2f 61 35 30 30 2f 64 .net:1935/a500/d 0000: c3 . 0000: 38 3f 76 69 64 65 6f 49 64 3d 35 35 35 37 37 32 8?videoId=555772 0010: 39 37 30 30 31 26 6c 69 6e 65 55 70 49 64 3d 26 97001&lineUpId=& 0020: 70 75 62 49 64 3d 35 39 31 32 31 26 70 6c 61 79 pubId=59121&play 0030: 65 72 49 64 3d 31 37 39 34 39 37 37 30 39 31 26 erId=1794977091& 0040: 70 6c 61 79 65 72 54 61 67 3d 26 61 66 66 69 6c playerTag=&affil 0050: 69 61 74 65 49 64 3d 00 04 66 70 61 64 01 00 00 iateId=..fpad... 0060: 0c 63 61 70 61 62 69 6c 69 74 69 65 73 00 40 2e .capabilities.@. 0070: 00 00 00 00 00 00 00 0b 61 75 64 69 6f 43 6f 64 ........audioCod 0000: c3 . 0000: 65 63 73 00 40 a8 ee 00 00 00 00 00 00 0b 76 69 ecs.@.........vi 0010: 64 65 6f 43 6f 64 65 63 73 00 40 6f 80 00 00 00 deoCodecs.@o.... 0020: 00 00 00 0d 76 69 64 65 6f 46 75 6e 63 74 69 6f ....videoFunctio 0030: 6e 00 3f f0 00 00 00 00 00 00 00 07 70 61 67 65 n.?.........page 0040: 55 72 6c 02 00 6a 68 74 74 70 3a 2f 2f 77 77 77 Url..jhttp://www 0050: 2e 6d 65 74 61 63 61 66 65 2e 63 6f 6d 2f 77 61 .metacafe.com/wa 0060: 74 63 68 2f 73 79 2d 35 35 35 37 37 32 39 37 30 tch/sy-555772970 0070: 30 31 2f 73 68 61 6b 69 72 61 5f 64 69 64 5f 69 01/shakira_did_i 0000: c3 . 0000: 74 5f 61 67 61 69 6e 5f 66 65 61 74 75 72 69 6e t_again_featurin 0010: 67 5f 6b 69 64 5f 63 75 64 69 5f 6f 66 66 69 63 g_kid_cudi_offic 0020: 69 61 6c 5f 6d 75 73 69 63 5f 76 69 64 65 6f 2f ial_music_video/ 0030: 00 00 09 ... DEBUG: Invoking connect INFO: RTMP_ReadPacket: fd=6 0000: 02 00 00 00 00 00 04 05 00 00 00 00 ............ 0000: 00 26 25 a0 .&%. INFO: RTMP_SendPacket: fd=4, size=4 0000: 02 00 00 00 00 00 04 05 00 00 00 00 ............ 0000: 00 26 25 a0 .&%. INFO: RTMP_ReadPacket: fd=6 0000: 02 00 00 00 00 00 05 06 00 00 00 00 ............ 0000: 00 26 25 a0 02 .&%.. INFO: RTMP_SendPacket: fd=4, size=5 0000: 02 00 00 00 00 00 05 06 00 00 00 00 ............ 0000: 00 26 25 a0 02 .&%.. INFO: RTMP_ReadPacket: fd=6 0000: 02 00 00 00 00 00 06 04 00 00 00 00 ............ 0000: 00 00 00 00 00 00 ...... INFO: RTMP_SendPacket: fd=4, size=6 0000: 02 00 00 00 00 00 06 04 00 00 00 00 ............ 0000: 00 00 00 00 00 00 ...... INFO: RTMP_ReadPacket: fd=6 0000: 03 00 00 00 00 00 97 14 00 00 00 00 ............ 0000: 02 00 06 5f 65 72 72 6f 72 00 3f f0 00 00 00 00 ..._error.?..... 0010: 00 00 05 03 00 05 6c 65 76 65 6c 02 00 05 65 72 ......level...er 0020: 72 6f 72 00 04 63 6f 64 65 02 00 1e 4e 65 74 43 ror..code...NetC 0030: 6f 6e 6e 65 63 74 69 6f 6e 2e 43 6f 6e 6e 65 63 onnection.Connec 0040: 74 2e 52 65 6a 65 63 74 65 64 00 0b 64 65 73 63 t.Rejected..desc 0050: 72 69 70 74 69 6f 6e 02 00 12 43 6f 6e 6e 65 63 ription...Connec 0060: 74 69 6f 6e 20 66 61 69 6c 65 64 2e 00 0b 61 70 tion failed...ap 0070: 70 6c 69 63 61 74 69 6f 6e 03 00 07 6d 65 73 73 plication...mess INFO: RTMP_ReadPacket: fd=6 0000: c3 . 0000: 61 67 65 02 00 0b 69 6e 76 61 6c 69 64 5f 54 54 age...invalid_TT 0010: 4c 00 00 09 00 00 09 L...... INFO: RTMP_SendPacket: fd=4, size=151 0000: 03 00 00 00 00 00 97 14 00 00 00 00 ............ 0000: 02 00 06 5f 65 72 72 6f 72 00 3f f0 00 00 00 00 ..._error.?..... 0010: 00 00 05 03 00 05 6c 65 76 65 6c 02 00 05 65 72 ......level...er 0020: 72 6f 72 00 04 63 6f 64 65 02 00 1e 4e 65 74 43 ror..code...NetC 0030: 6f 6e 6e 65 63 74 69 6f 6e 2e 43 6f 6e 6e 65 63 onnection.Connec 0040: 74 2e 52 65 6a 65 63 74 65 64 00 0b 64 65 73 63 t.Rejected..desc 0050: 72 69 70 74 69 6f 6e 02 00 12 43 6f 6e 6e 65 63 ription...Connec 0060: 74 69 6f 6e 20 66 61 69 6c 65 64 2e 00 0b 61 70 tion failed...ap 0070: 70 6c 69 63 61 74 69 6f 6e 03 00 07 6d 65 73 73 plication...mess 0000: c3 . 0000: 61 67 65 02 00 0b 69 6e 76 61 6c 69 64 5f 54 54 age...invalid_TT 0010: 4c 00 00 09 00 00 09 L...... DEBUG: Invoking _error INFO: RTMP_ReadPacket: fd=6 0000: 03 00 00 00 00 00 12 14 00 00 00 00 ............ 0000: 02 00 05 63 6c 6f 73 65 00 00 00 00 00 00 00 00 ...close........ 0010: 00 05 .. INFO: RTMP_SendPacket: fd=4, size=18 0000: 03 00 00 00 00 00 12 14 00 00 00 00 ............ 0000: 02 00 05 63 6c 6f 73 65 00 00 00 00 00 00 00 00 ...close........ 0010: 00 05 .. DEBUG: Invoking close INFO: RTMP_ReadPacket: fd=4 0000: 02 fb 78 7f 00 00 04 05 00 00 00 00 ..x......... 0000: 00 26 25 a0 .&%. INFO: RTMP_SendPacket: fd=6, size=4 0000: 02 fb 78 7f 00 00 04 05 00 00 00 00 ..x......... 0000: 00 26 25 a0 .&%. INFO: RTMP_ReadPacket: fd=4 ERROR: RTMP_ReadPacket, failed to read RTMP packet header ERROR: Request timeout/select failed, ignoring request Closing connection... done! DEBUG: serverThread: processed request DEBUG: serverThread: accepted connection from 192.168.1.100 to 95.140.226.90 DEBUG: SHandShake: Type Requested : 03 DEBUG: SHandShake: Client Uptime : 297225 DEBUG: SHandShake: Player Version: -128.0.3.2 ERROR: Handshake failed Closing connection... done! DEBUG: serverThread: processed request