This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to capture traffic from YouTube

2

How do I capture packets sent only to YouTube and received only from YouTube? I want to check how YouTube streams its video, especially the live ones, so I want to capture only send's and receive's from YouTube. How do I do that?

asked 09 Aug '11, 12:50

Giu's gravatar image

Giu
31113
accept rate: 0%

edited 16 Aug '11, 23:32

helloworld's gravatar image

helloworld
3.1k42041


One Answer:

2

If you want to see only the traffic related to you tube, you just need to apply an ip filter

ip.src ==  74.125.232.232

But if you want something more accurate you might want to include some of this other filters

           udp.port==554 
           rtsp

answered 18 Aug '11, 14:42

sfrj's gravatar image

sfrj
746
accept rate: 0%

That won't mean he only captures packets to or from YouTube; it captures all packets and then filters them out later.

Unfortunately, it's really hard to have a capture filter for YouTube - I just played a video, and it was sent over HTTP from a host named "o-o.preferred.nuq04s10.v2.lscache2.c.youtube.com", so it's probably very hard to predict what host will send the video. I'd say "capture without a filter and look for YouTube traffic".

(18 Aug '11, 18:08) Guy Harris ♦♦