防火墻RTSP協(xié)議處理流程及RTSP ALG應用

1、lRTSP芝ERTSP(RealTimesireamproioco-)、RTSP 8 HTTP 81湖善WHHW耕swfflalB淳、2WSH8S1 saB。瀏 Wais rtsp 、fi滯aaRTSP 耕* 主HH排 18i usiiH RTP、RTCP 融淳/*洲殊。H -ISS ssss1半Mms鑿KWSZTCPIII咨鼎舞wfc;srSo-L/_ly-iCfj1Iq1,-Ea4-Ea7=sGfoA q744Ub7EL,J*is44 471OhyJ-5F打5 FFl pI.-f!pPFl F215 E3CR7BE rtsp:. lCi-W&im.g9f54.nile_lWkbit.ni

2、RTSP.1.0初 rrsp - caiu-dch MK seq=l Ack=136 tfin=l。日 uen=or. =r 如lon pinL-sQs)【5r+pam -indTa5egnlen1:LenesequrDncrb云 MbrD2c- (也羿-i-h-ewrbqMgnn).Adin 呈一FDd 是aM3S-U uH 富 der LEmtlKK*it5El8S含sS5I m 專注82(空NJMindDNilze 擊 WH 55田5caloflaL&lndlM SME5asHchenksoE 氏 Doa【蚤一JU&Lon 土 5 咨理L_qEm paintEr!CJ國opto-ns(1

3、2 bytrbSL Mma.M 旨 Mgmenl-r/M-e-oiPEr-arionWOPL window 51E.zoAPEsiclnNOPJU uoApeFal-Fo-n 3 - 5SK p 礙a.rts.2 瞄 FMis嫡四酣s鑿* 沸陳IT RTSP KKt (OPTIONS )、s S (STfIfflDESCRIBn1SETUP，TEARDOWN，PLAY，PAUSE，OPTIONS，ANNOUNCE， RECORD融)。i 3.1fl8864.44.79TCP66 can-dch - rtsp；SVN Sflq=O kin=6 打齊 Ler=d HS=liffi 延二 XK_Pf

4、RN=：9 3.1fl777210.23.Ifl.99TCPnsp - can-dchSYN, ACK 5&q=D Ak瑚.1111=5840 LHTl=O M53=W6D 5M：IL-PERM=1 W5=641W詢碩MuiLmTCP由 匚ain-d匚h - rtsnMkl 電41 Auk=l rn=624tl L3rt=0| 11 3.2Q5O264.4.4.Zia.2fl.lfl.99RTSP1B9 options r csp: /, io. 99:554 /s anpl ej.ookb i r. n?i4 rtsp 1,112 3.205713-10.28.1&.994.4.4JTCP6

5、0 rtsp - can-dchLM：KJ S-eq-1 Ack136 flln-103 Len-dU 3.20770310,28.16.994.4.4.?RTSP26D Reply： RT5P. L.0 200 OK14 32的&710.2S. 16.99RTSP215 DE5CRIEEtsp:,10.16.99:554-ianple_100kbit.nfil RT5P, 1.015 3 .216B7SW. 28.16.99TCP1514 tcp segient erfa reasseribl ed pduU 3.21M3910，網(wǎng).10.99RTSP 祝317 Reply； RT5P/1.

6、0 200 OK17 LE而l.d.4.7TTPWmrlch - rtnrjrtlJrl=1 Clin h-ir=fil?40 1 p-t=Tia Frsnie 11: 1B9 bytes on wir-e(1512 bits), L89 hyts aptired (1512 bits；I Ethernet II, 5rc: nwar3_2j:0B:81 (DD:0c:?9:2a:G3:fl, Ds?: visualre_00:?:24 (00:00:21:DD:?:?4)-interne; Frotocol Versia 5L； A.AA.74,4.4,Dst; 9 (9)

7、Ifansni ssion Control ratacol, Ere Porl: can-dch (IMS), D&t Pdfl: rtip (554), Seq: 1, Ack: 1, Bn: 135二 R-eal rl le sireaning proiocclHequBst: 3PTZONS rtsp:. 9:55/sairplejlddlibit.mp+ ftiep/L. O.r-.rF&thDd： 0P0N5URL :匚邛:/LO. 28.13.: 554/s a叩1 eJ.00kbi t. irp4CSeq: 2r .nUser-Agent; LiiM.c/2.0.8(UVE555

8、 Streaing Media v20CL2.12.1B)rnv.n10 3.19000110.2S.16.99TCP54 can-dch - rtsp ACK 5eq=l Ack=l -=64240 Len=011 ?.?G5O?3U). 28.16.%RTSP135 DPTIDUS r? s p: 710. . 16.59: 5 54/s np 1 f-JOOkh i t. irpi RTSP/l. 012 3.205713ID. 24.16.994.4,4萬TCP60 tsp，945824.4.4.?10.2fi.lfi.99RTSP247 SET尸 rtsp:/Afl- 2116- W

9、 ： 55e HMkbit. mp4/t radclD=l RTSP： 1.0：raifte 13: ?60 byte on ire Q080 bits). 260 byte captured (203( bits)E =7 her net II, Src: irisualTfljOO: 32:3d (00:00:22:00:12:21) d 晾: mare_2i:0S:83 00:0c:29:2i：G3:83)Internet Protocol Versi an 4, Src: lQ.2B.lt. 99 (10.20.16.fl?), Dst: 4.-.4.7 (4.-.4.7)z iran

10、snlssion control Protocol, 5rc pcti: up (5W), jsi Jort: can-dci (1519, seq: 1, Ack: 136, Len: ZM-Real Time streaming Protocol3 Response: RT5P/1.0 2DO OKr,nStatus: 2DDserver: D55；J6.0.3 (&u1ld/526.3； rlaifoni/Llriiix; Release/rarwln strenfng server; siiie/Developmeiir: )rnPublk： DESCRIBE, SETUP, TEAR

11、DOWN, PLAY, PAUSE, OPTIONS,哪DUNCE, RECORD.AnVn客戶端繼續(xù)發(fā)送一個RTSP描述命令(DESCRIBE ),要求得到S提供的媒體描述信息，流服務器 通過一個SDP描述來進行反饋，反饋信息包括流數(shù)量、媒體類型等信息。r14 3.M96474J.4JID. 21.16.99RT5P215 3E5CRIGE rtsp: /；10.2fl. . 99:554/5dlTJ 1 _l(KWli t. rrp4 RT5P/1.0翊3J1693-910JS.K9910Jfl.16.994J.4J44.4.7KPRT5Pg1511 TCP 央gnQfit uf 日囂ss

12、arbFCHJJ17 Reply: RI5P.il-0 200 OKL 土 M叫而LB 3.2945LLE-74J.4.7iu. 29.10.yyLflJ3.16.99TIPRT5P5Tcan-ocn - risp KKj s畔四門gut寡uLen=U2+7SETIPt邛:1。.職戚的：汨3如110：岫*.舊止頃kZD=3 RT5P.J1J：r? 3J3fil4320 12382139M.4.7LO. 23.16.99ET9RTF475 fteply： ftTSP/l.D 2DD OK46 inkrmm rip version 21 3.23854.44.79RTP偵 unkrcwi ftTP

13、 version 3a rnK L-: 215 byte ai vire (1721 bits), 21S bytes optired (1720 bits), Ethernet n, sre; VWrE_2a;0S;B! (DO;Oc;29;?a;M;8fl, D5t; VisualTeJM我;H 伽;DO;H;QO;W;H)Intarnai： Frotocnl Varsicn 4, Src: 4.1.+. .4.17J. Cst: U. 2B.16.?9Tanmi55物 Cantral :ntocDl. 3x Fort; can-dth (1H9), Kt Pert; rtsp (554)

14、, 5eq; 13fl, Ack; ：G?. Len; 151-Red -ire Strsarlng FratKol-Request; CESCRIBE rtsp; ,10. ZB.L6.?9;5,;5iiple_lK)kbiL.p+ RT5P. l.OV rNfthod:IUi.; rtsp28.16.9:辮saiple.l.On-XJ J X.XUUJU丁口lu-ULM i F_Lirvj_3cT=ZT?flLls=l3JQn i 11i.H-i-1-wi_c 11v!13 3.2B45329RTSP247 SETUP rt5p: -10.26. Lc. 9: 554 sampeJOOkb

15、it.mp4/track：D=3 RT5P.1.0 !IS ?, 266143：9RTSP47 Reply： RT5P/1.0 2 DU OK2Q 3.2Ba2134.4.4.?10.2&. 16.99RTP46 Unknmn RTP ver si on 321 J.2B86859RTP46 unknown RTF v-ersi or 311 3.293242M4,710,24,16.99RJSP277 SETUP rtsp：/ID. 28.1fir 99： 554/?ample lOOkblt. mp4；-racklM RTSP/1.023 3.29470510.2B.16.994.4.4.

16、?RT5P475 Reolv： RTSP.1.0 200 OKIFrame IB: 247 bytes on wire (1976 bits), 247 bytes captured (1&76 bits)ec her net u, arc； vware_?d： 08:83 (ou：oc：Z9；2a；QS：53), dsi； v1sualTe_oo；32；24 (oo：oo：22：oo：3Z：24)I-Kernel Pratacol versici 4, src: (), Dst: 10.23.16.M (?)既G Tiie 5trearing ProtocolTansmitsidf Cont

17、rol Protocolf Src Port: can-dck (1915), Dst Port: rtsp (55i)h Seq: 257, Ack: 1920, Len: 1.930 Request: SEP -tsp:/ID.28. Lt.9: j54/samp 1 E_100kbit.mp4,LrackID=3 ffTSI/LOrn Kethad: setupUR_: rtspi. /lQ.28.16.99:554/sampleJLOOkbit.4/tradcID=3CSeq: 4VnUser-Agent: .ibvLC.2-0r8 itm 日 ”叫 ninj m 麗皆 平QH,lL1

18、8)LrnTrans part: RTP A；F； uni cast: cli ent_por t-1920 - L9 工Lfi i.2&15S21.0.28.Rl-.V即UPT?。贺?LQ一巽一16一 豹：5亍4,湍嘩h_lCCittd J HpTTMlG ：日 RT5P/L 0rr2.286143 3RT5PAll Reply： RP/1.-3 200 OK3.2882L3 L4.L丁LO.28.16.RTP46 Unknosn RIP VMwion 33.?S6S5 J.4.4.7to.23.16.-99rtp目6 unknown rtp version 3Frane

19、19： 175 byres on lire (3B0O b1rs)5 a?5 byres captured (ssoo bits)Ethernet II, Src; isualTe_QO;32;24 (DQ:0D:H:(Kk32;2l), D5t; rmare_2d；O8; 83 (00;0c29:;2a;08;83)Internet PretocDl Version 4a Src: 10.2B. 16.99 (10.2A.16.99), Dst: (4.-4.-4.7)Trariiirisslafl cancrol proiocol, src pari: risp (554), esc po

20、rt: can-dch (1919)?酩牛：ig3Ga Ack: 49D, Len： 421 Real Time streani ng ProtocolB Response: RTP/1-0 200 OKrnSIXTUS! 2ODServers K5./6-0.3 (BuiId?526.3; Platfori/LinuK； R-eleaae/Damin Str-eaming Server; State/Developnent; )rnCseq;: 4rnUst-Modified: Tue, 24 5ep ZM3 02:02:24 grrrnCache-Control: U5t-revalida

21、tfrnSession： 4B&SQ4&66J3B2666I2如e: Wedi 25 Sep 201J 03; 18; 17 CFTrnExpires: Wed, 25 Sep 2013 平5TT nTransport: rtp/avp；unicasr; eonjrcfeiO-衛(wèi)&L6.99;cl 1 ent_port-L92O-igzi;server_porA697Q頊Wl;ssrc=5OC3FBD5 rn5.流媒體連接建立完成后，客戶端發(fā)送一個播放命令(PLAY),服務器就開始在UDP上傳送媒體流 (RTP包)到客戶端。-1 . -8-. 4 .i ij_ / n_ i u. t，ULI叫

22、HI IH IF, 1IIIIAI KIF|26 3,295736ID. 28.16.99RTSP23t PLAV rtip:ZB. 16.99: j 54 sarpl e JOOkb i t. mp / R_5P 1.01 AT N 7臼莉女：!)1 n ift 1aa.d .-1 -1 7?S 3. 237002io.2B-L6.ggRTP65 PT=nyn3rTlRT-,-IpP-97, SSRtIIESB.?!, S|=64J.Bb? liw=TL廣玷祐，kar-&6l SEK-OxSOCFEDS, Eeq-510D6, V ne-206 5 5 572 34, KarkM 3.297

23、599ID. 2B.16.99RTCP126 Sender Report Source descriptian沖plication specific ( qtsi ) subtype-132 3.363646ID. ZB. 16.99RTP210 DynairicRT-Ipe-! SSKxSOCFBDS, 5eq=10D7R TiiiE=2此 35碇 H4 Karkii 3.4055644.4.4.Z10.28. If. 99TCP舛匚an-ck卜-rtsp ACK Sel=895 Ack=3141 irin=638F Len=034 3.42640094.4.4-7RTP65 PTjriai

24、dCRT-Ipe-索，55rc=oxiesleb23, 5eq=6+367F Tiie=717749Q2, harkJS 3.4Z655510, ZB, 16. WRTP?7e PT=DynaFlcRl-ipe-961 拓旺=0心區(qū)年8既，5階&1如8, iinp=z而巧的出L 愉k16 3.49741710.2L1G.MJ.4.4.7RTP1QL pr=TarTiRT3-Ipp-Q6, RC=OxSOC3FBD5, Sq=61009, T-ne=206Ti75234, Karkg Fraire 亟：2兼 bytes on xir。(1383 bits,由8 bytes(:叩tured (19

25、9E bits)3 Etberrst IljVware_2a:08:8 (CIO:Oc:29:2:08:83), Dst: Vl5jalTe_DD：j2:24 (00:00:22:00:32:2t Zrt?rr;t otocol Verjicn 4, 5rc: 4.-.-.7, Dst; 9 J1D.28.16.99)-ransmisiiwi Control Protocol, 5ri Kt; can-dch (L9L9), DsL 3ct; tsp f554), 5eq; ?i3, Ack; 2771, Len; 1.82-real tIk su-eailng protocol陋中2寸Pi

26、兇:/；lQ,?S.L5.：5舛扣Miple_lDDkblt.rrp4.- RTS- .I.QrnMtrd： PlAYUUL!吐甲,111& 16. gg: 5 54/ 畔11 fljLOOkbi t. apl/CSeq: 6r/iUser-Ajgcnt: JbVLt/Z.0.8(LIVE555 Streaming redia5C551 c-; 4SM9456由313266642Ranqe; mit=0.DDD-1rn6.在播放過程中客戶端還可以向服務器發(fā)送命令來控制快進、快退和暫停等。最后，客戶端可發(fā)送一個終止命令(TERADOWN)來結束流媒體會話。JI Sin 】h 日目口17口hh E

27、qraiupp 口qnnrtflpurrimtinnGX4L如1口54.一4,?BT5PF TEARDO跟 rt??；.力口-網(wǎng)-冶99：554/53叩】已1kiit,RT5P.LDl&!3 4-S.4CI1411 4.4.4-.?16.2I&.Ifi.MkILPKcpui l u_jdLycS26 43.90423-2 土LLF乩ML駟 RTZP58 Receiver Rtpori GoodbyeB27 43.905 -4.4.7IQ. ZE-16.9 TCfM CJO-dch - rtsp F1M, AK SGCf-lOfiZ ACkTUIL h1n-63937 Len-C82古 44,83

28、肝?6 4.4.4,TID,況.！.列ffTSFZZ1 TCP RetMnsirisWDrg TEAIUBWW rt5l：門口.2&.16,99:58/5呼!E_1嘩btL ipV RPSPJL 口眺g 44T66377 4.4.4購ffTSPNMKPRetransiiri55kinlEAItCCWHrts：/lD.4.1&9&:5XJ*iipleJlOMcfrit，dVRrsP/L(J5 Fraie 跑:221 byt-es on nire (1768 bfis)221 bycts capiured (176S bits)i Ethernet u, src: vnw歸1_禎:的:北(oo：o

29、c：2g：2a：Q&：a3), dsi: visualiro：32:24 fro：Kj22：0Q：32：24)i internet Protocol Version 4. Src: . Dst: 10.2fl.16.99 (10.28.16-95)0Tran5ni55ion Control ProtocDl, 5rc Port: can-dch (1919)P Dst Port: rtsp (55*1)P 5eq: 895P Adk: 3141 r ten: 167-Real Time StrEEning PratdcallTizmnntiH 廣仃片 的卜川一 16. 99： 554/Spl

30、JOOkbll. 14/ RTSP/l.Grf1I TEARDOrtTIUEEHE市7771由057:55物4咋1 e_100kbiLnpi/CSeq: 7rnuser-Agm; l1 Ixc/.OuS (live555 scrbirring iedla 2012a12K13)rnSSlon： 43&19i543LJ266&42VVn三,簡單的RTSP消息交互過程C表示RTSP客戶端,S表示RTSP服務端1.第一步：查詢服務器端可用方法1.C-S:OPTION request詢問S有哪些方法可用1.S-C:OPTION response/S回應信息的public頭字段中包括提供的所有可用方法2

31、.第二步：得到媒體描述信2.C-S:DESCRIBE request/要求得到S提供的媒體描述信息2.S-C:DESCRIBE response /S回應媒體描述信息，一般是sdp信息3.第三步：建立RTSP會話3.C-S:SETUP request立會話通過Transport頭字段列出可接受的傳輸選項，請求S建3.S-C:SETUP response項，并返回建立的Session ID;/S建立會話，通過Transport頭字段返回選擇的具體轉輸選第四步：請求開始傳送數(shù)據(jù)4.C-S:PLAY request /C請求S開始發(fā)送數(shù)據(jù)4.S-C:PLAY response/S回應該請求的信息第五

32、步:數(shù)據(jù)傳送播放中S-C :發(fā)送流媒體數(shù)據(jù)/通過RTP協(xié)議傳送數(shù)據(jù)第六步：關閉會話，退出6.C-S:TEARDOWN request/C請求關閉會話6.S-C:TEARDOWN response /S 回應該請求上述的過程只是標準的、友好的rtsp流程，但實際的需求中并不一定按此過程。其中第三和第四步是必需的！第一步，只要服務器客戶端約定好，有哪些方法可用，則option請求可以不要。第二步，如果我們有其他途徑得到媒體初始化描述信息（比如http請求 等等），則我們也不需要通過 rtsp 中的 describe 請求來完成。、防火墻處理RTSP協(xié)議的幾種應用場景1.包過濾正向 (Trust-U

33、ntrust )只放通TCP554端口，三層源NAT ,不開啟RTSP ALG。數(shù)據(jù)轉發(fā)過程：1 ) PC-Server發(fā)起TCP三次握手連接，建立RTSP 554端口的控制連接。2)Server-PC發(fā)送UDP視頻音頻流數(shù)據(jù)。3)防火墻包過濾阻斷該數(shù)據(jù)流 ，Server 沒有收到PC返回的確認包，重新開始協(xié)商控制連接，連接建立后使用TCP來進行視頻音頻流的傳輸(此時PC播放視頻時會先卡 頓510S后再出現(xiàn)視頻數(shù)據(jù)，播放時會卡)，此時TCP傳輸數(shù)據(jù)。Nd. _TimeSourceDHiinabonProtDcalZnfn1U.KJPpt=mpeixB niie=ijtib3Uj010. 5J9

34、9S4172. 30.133.1172. 30.153.14 :RJPPT4VPEG-TI transport streaBS, 5彌上羽 W, Wq二1H % Ti ne-310.540533PT5 32210.31111111MPEG FESprivate-streai-110.541027172. 30.13S.145RIPpt-mpec-zi bar叩wl srreaffSi 弱區(qū)-0心5臣99滅seq-1520, Tfne-15665025i810.511943415mp區(qū)-二I rrarsporr streairs. ssrc-05A499K：. eq-15

35、21B Time-15&6502597kHzMPEG-1Audio Layer15? 310. 544940172. 30.138.1172.34J.15fl.145RTPPT=MPEC-II transport stream r 55RC=0 x45iM99SCa Seq=15243 Ti ne=1566S023?1-452410.545936172. 30.13.145RTPPT=MP；-ZI transport streajT 55RC=0 xA5A493C ( Sea=1525? Tine=156650257I I 141 i J! iiu.1/iJi1/Z.dU.1JS.110.54

36、69&7172.30.13E.1172 .30.153.14RTP| | 洶 1D. 559M2172.30.158,145RTSPOP-ION5 rt5p： l?2,30,1J8,1.100,t3 RT5P/l,0_ i1 .i_ r p, h .i- 1 U . J j-jh U172. 3*D. 1145RT5PReply: RT5P/1.0 200 OK11 TliiSO 10.56010345172.3Q.13B.1RT5PDESCRIBE rtsp：/172-30.13.1/100.ts RTSP/1.010. 549Q172.3Q.138.1172.3Q.153.145RT5P/

37、5DPReply: rtsp/10 200 ok, wiih session destripiion| I H5S2 ID. 562JE3172.3O.15S.145RTSP兌tup rtsp:/i72. so. I38.i/i9.i5/n-ada nrsp/i.o1炬*ID.56313317?, ao.ns.i172.3。.1 血145RTSPReply： RTSF/L0 ZOO IK| 114534 10.561000l?Z.3Or158.145172.3&.13B.1RJ5PPLAY -*p:.拇,1 珅門/LtKLt5, RVP二0UK玷nn g心177.1I?, mnw.i 相UTp偵E扣偵巳妃RT5PCDntmuatiori10. 5-54 61C172. 3Q.13S.145RTPft-mpec-zi crarporL streatrs, 55RC-0 x360.cM4, seq-15224, Tfie-27532253-361453S10.554613172.3Q.13S.I172.30.15a.RTPpt-mpk-zi trarsraorr streajrs. 5SRC-cx36Q.Server發(fā)起TCP三次握手連接，建立RTSP 554端口的控制連接，此 時防火墻RTSP