## tshark- bzw. grep-Terminal-Ein- und Ausgabe der Webseite: http://www.zdf.de/ZDFmediathek#/beitrag/video/2040580/ZDF-heute-Sendung-vom-01-Dezember-2013 ~ $ tshark -i eth1 -s 0 -B 50 -V -P -l | grep -E --context=1 "GET|POST|URI|baseURL|statuscode|/type|/title|detail|assetId|originChannelId|originChannelTitle|/channel|duration|/length|airtime|timetolive|/fsk|hasCaption|vcmsUrl|formitaet|/quality|url|/ratio|height|width|videoBitrate|audioBitrate|filesize|facet|mms|rtsp|rtmp|llnwd.net|core-cdn.net|beitragsDetails|host|hostname|socks|protocol|playpath|path|playlist|swfUrl|tcUrl|pageUrl|app|swfhash|hexstring|swfsize|swfVfy|swfAge|days|auth|string|conn|type:data|flashVer|subscribe|resume|timeout|start|stop|token|key|jtv|JSON|hash|hashes|buffer|skip|conndata|subscription|swfHash|swfSize|output|SOCKS4|proxy|connection attempt|version|set_playlist|SecureToken|authentication|NetStream.Authenticate.UsherToken|SWF Verification|SWF player|src|edgefcs.net|dataURL|cdn-vod-fc|vars_player.videorefFileUrl|video lang|url quality=|arte_vp_url=|streamer|videothek|json|m3u8|asx|mov|smil|\.avi|3gp|aac|flac|flv|h264|mkv|mp2|mp3|mp4|ogg|\.ts|vorbis|vp8|webm|wma|wmv|image/x-icon|stream|videoplayback|annotations_invideo|application/json|json|TCP Retransmission|application/octet-stream|Encrypted Handshake Message|Application Data|Client Hello|deleteStream|User Control Message|metadata_time|Handshake|connect|Window Acknowledgement Size|Set Peer Bandwidth|Set Chunk Size|NetConnection|createStream|FCSubscribe|onBWCheck|_result()|Stream Begin|NetStream.Play|RtmpSampleAccess|metadata1()|onBWDone|Set Buffer Length|Stream Is Recorded|NetStream.Data|onMetaData()|Video Data|Audio Data|Aggregate|setBandwidthLimit|Acknowledgement|LIVE|server|mediaType|mimeType|videoPlayerUrl|RTMP [[:alnum:]]* play|Playing|Started|playing" Capturing on 'eth1' 12 .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http] [Message: Connection establish request (SYN): server port http] [Severity level: Chat] -- .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http] [Message: Connection establish acknowledge (SYN+ACK): server port http] [Severity level: Chat] 27 -- .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http] [Message: Connection establish request (SYN): server port http] [Severity level: Chat] -- .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http] [Message: Connection establish acknowledge (SYN+ACK): server port http] [Severity level: Chat] -- 3.022179 77.20.162.172 -> 92.123.69.238 HTTP 358 GET /ZDFmediathek HTTP/1.1 Frame 32: 358 bytes on wire (2864 bits), 358 bytes captured (2864 bits) on interface 0 -- Hypertext Transfer Protocol GET /ZDFmediathek HTTP/1.1\r\n [Expert Info (Chat/Sequence): GET /ZDFmediathek HTTP/1.1\r\n] [Message: GET /ZDFmediathek HTTP/1.1\r\n] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI: /ZDFmediathek Request Version: HTTP/1.1 -- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0\r\n Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n Accept-Language: en-US,en;q=0.5\r\n -- \r\n [Full request URI: http://www.zdf.de/ZDFmediathek] [HTTP request 1/1] 48 -- \r\n Startseite - ZDF Mediathek\r\n \r\n \r\n \r\n \r\n \r\n -- \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n -- var _basePath = "/ZDFmediathek/flash/";\r\n var _appPath = "/ZDFmediathek/";\r\n var _configPath = "http://www.zdf.de/ZDFmediathek/xmlservice/web/konfiguration";\r\n -- //Deeplink\r\n var _zdfmediathekDeeplink = "/hauptnavigation/startseite";\r\n //Enable Disable FlashDetection HERE\r\n -- \r\n \t
session
\t\r\n \t
\t\r\n -- \t\t\t\t\t\r\n \t\tStartseite / \r\n \t\t\t\t\t\r\n \t\tTipps / \r\n \t\t\t\r\n -- \t\t\t\t\t\t
\r\n \t\r\n
\r\n -- \t\t\t\t\t\t
\r\n \t\r\n
\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\t\t\r\n [truncated] \t\t
\r\n \t\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n --
\t\r\n \t\r\n
\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\t\t\r\n \t\t\r\n \t\r\n -- \t\r\n \t\t\r\n \t\r\n -- \t\t\r\n \t\t
  • Startseite\r\n \t\t\t\t\r\n \t\t