Professional Documents
Culture Documents
RTSP
RTSP
RTSP
TOPICS Introduction RTSP and Streaming Role of RTSP RTP and RTSP Working of RTSP RTSP Methods Applications of RTSP RTSP Vulnerabilities
Introduction
RTSP is an application-level protocol for the control of real-time streaming data. IEFT Standard RFC 2326 It uses RTP as the underlying data delivery protocol and offers a VCR-like control to the user: Play, Stop, Pause, FF and REW, as well as random access to any part of the media clip.
(Introductioncontd)
RTSP also helps the server to adjust the media bandwidth to the network congestion in order to suit the available capacity. Another important function of RTSP is its ability to choose the optimum delivery channel to the client. For instance, if UDP cannot be used (some corporate firewalls will not pass UDP), the streaming server has to offer a choice of delivery protocols multicast UDP or TCP to suit different clients.
RTSP is similar to HTTP/1.1 in terms of syntax and operation but differs in several important aspects. With RTSP, both the client and the server can issue requests during interaction, as opposed to HTTP where the client always issues the requests (for documents).
RTSP maintains a state by default which happens to be very important in streaming media files. The HTTP protocol is a stateless protocol. This simply means that HTTP is unable to retain a memory of the identity of each client that connects to a web site and therefore treats each request for a web page as a unique and independent connection, with no relationship whatsoever to the connections that preceded it.
(contd)
Large audio and video files need not be downloaded to your computer . Streaming media technology allows the client to see or hear the content in just a few seconds instead of waiting.
pre-stored media Its already been recorded and archived somewhere, when the user wants to access it we serve it as a stream live broadcast media The content is streamed as its produced (there may be a small editing / safety delay, as with traditional broadcasting) straight to the user live interactive media Such as videoconferencing each user might produce their own stream, and there isn't control by one broadcaster
one-to-one or point to point - in networking terms, unicast. The stream travels directly from the source (server) to the user (client). one-to-many or multicast. One stream will be (literally) broadcast to many users.
Role of RTSP
Controlling and processing the interactive control functions such as pause/resume, fast forward, rewind is an important aspect of streaming and RTSP takes up this major role. Delivery mechanisms are based solely on RTP. RTSP is designed to be on top of RTP to both control and deliver real-time content.
RTSP implementations will be able to take advantage of RTP improvements such as RTP header compression Here we need to know the differences between RTP and RTSP to know that both have their own specific functions in streaming.
QuickTime automatically translates the viewer interaction with the on-screen movie controller into the proper RTSP requests. By contrast, RTP is a one-way protocol used to send live or stored streams from the server to the client.
Iris
W e b b ro w se r
T ow er b ox
In te rn e t
T ow er b ox
Working of RTSP
FIGURE
RTSP Media Player-Server Sequence Chart User Interface RTSP Player SETUP response1 PLAY audio Activate RTP response2
Activate RTP
OpenURL
RTSP Server
The server informs the client with an OK (ack) response to indicate that the stream has been prepared successfully. The client starts the streaming with a RTSP PLAY request and ends the streaming session with a RTSP TEARDOWN request.
RTSP Methods
Method
DESCRIBE ANNOUNCE GET_PARAMETER OPTIONS PAUSE PLAY RECORD REDIRECT SETUP SET_ PARAMETER TEARDOWN
Description
Retrieves the description of a presentation Posts the description of a presentation Retrieves the value of a parameter Queries the available methods Streams delivery is halted temporarily Starts sending data Starts receiving data Informs to connect another server location Specifies the transport mechanism Requests to set the value of a parameter Stops the stream delivery and frees the resources
RTSP Applications
Streaming of multi-media via Internet Video conferencing & lectures. Broadcasting of entertainment. Remote digital editing Voice mail
RTSP Vulnerabilities
Vulnerability VU#329561
Real Networks Helix Universal server Vulnerable to buffer overflow when supplied an overly long string within the "Transport" field of a SETUP RTSP request.
Impact
A remote attacker may be able to execute arbitrary code on the vulnerable system. This attacker-supplied code would be run with the privileges of the user running the Helix Server.
References
www.i tf.or htt ://www.kb.c rt.or / ls r/t ch/ tr mi T ch ology.html
htt ://www.cswl.com/whit
.html
htt ://www.cisco.com/ iverc /cc/t / oc/ roduct/software/ios 0/ 0 ewft/ 0t/ 0t7/fw_rts .htm
Questions
#1. What is the transport protocol being used by RTSP? Ans. An RTSP client may use reliable transport connection such as TCP or alternatively use UDP.(So could be on top of UDP/IP or TCP/IP) #2. Where is RTSP used? Ans. It is used by streaming media players ,to control the media streams. #3. What is main difference between RTSP and HTTP? Ans. HTTP is a stateless protocol ,where as RTSP maintains the state through out.
THANK YOU