If I recall correctly, the handshake gives you the initial RC4 key, then the entire stream (including the connect packet) is run through the RC4 decoder.<br><br>The SWF hash is only used as part of a SWFVerification ping response, which is not part of the handshake/connect.<br>
<br><div class="gmail_quote">On Mon, Oct 8, 2012 at 10:11 AM, triton bamb <span dir="ltr"><<a href="mailto:tritondelta2k@gmail.com" target="_blank">tritondelta2k@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
to decrypt the data of the CONNECT packet do you only need to apply the RC4_encrypt() or also apply the SWF hash?<div class="HOEnZb"><div class="h5"><br><br><div class="gmail_quote">2012/10/8 NhJm <span dir="ltr"><<a href="mailto:nhjm449@gmail.com" target="_blank">nhjm449@gmail.com</a>></span><br>

<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Google "rtmpe specification". :)<br><br><div class="gmail_quote"><div><div>On Mon, Oct 8, 2012 at 9:51 AM, triton bamb <span dir="ltr"><<a href="mailto:tritondelta2k@gmail.com" target="_blank">tritondelta2k@gmail.com</a>></span> wrote:<br>


</div></div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div>I do not find any document about the RTMPE protocol, can someone help me to understand how to decrypt the connect packet containing the main infos of the media: swfurl, url...?<div>


<br></div><div>Best,</div><div><br></div>
<div>Triton</div>
<br></div></div>_______________________________________________<br>
rtmpdump mailing list<br>
<a href="mailto:rtmpdump@mplayerhq.hu" target="_blank">rtmpdump@mplayerhq.hu</a><br>
<a href="https://lists.mplayerhq.hu/mailman/listinfo/rtmpdump" target="_blank">https://lists.mplayerhq.hu/mailman/listinfo/rtmpdump</a><br>
<br></blockquote></div><br>
<br>_______________________________________________<br>
rtmpdump mailing list<br>
<a href="mailto:rtmpdump@mplayerhq.hu" target="_blank">rtmpdump@mplayerhq.hu</a><br>
<a href="https://lists.mplayerhq.hu/mailman/listinfo/rtmpdump" target="_blank">https://lists.mplayerhq.hu/mailman/listinfo/rtmpdump</a><br>
<br></blockquote></div><br>
</div></div><br>_______________________________________________<br>
rtmpdump mailing list<br>
<a href="mailto:rtmpdump@mplayerhq.hu">rtmpdump@mplayerhq.hu</a><br>
<a href="https://lists.mplayerhq.hu/mailman/listinfo/rtmpdump" target="_blank">https://lists.mplayerhq.hu/mailman/listinfo/rtmpdump</a><br>
<br></blockquote></div><br>