No.     Time           Source                Destination           Protocol Length Info
     21 2.279329000    192.168.1.2           50.7.28.210           RTMP     2048   52485 > macromedia-fcs [PSH, ACK] Seq=1538 Ack=3074 Win=66792 Len=1994 | Handshake C2 | connect('flash')

Frame 21: 2048 bytes on wire (16384 bits), 2048 bytes captured (16384 bits) on interface 0
Ethernet II, Src: Micro-St_f7:a4:38 (00:1d:92:f7:a4:38), Dst: GigasetC_ee:0b:e8 (00:21:04:ee:0b:e8)
    Destination: GigasetC_ee:0b:e8 (00:21:04:ee:0b:e8)
    Source: Micro-St_f7:a4:38 (00:1d:92:f7:a4:38)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.1.2 (192.168.1.2), Dst: 50.7.28.210 (50.7.28.210)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
    [Total Length: 2034 bytes (reported as 0, presumed to be because of "TCP segmentation offload" (TSO))]
    Identification: 0x6d59 (27993)
    Flags: 0x02 (Don't Fragment)
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x0000 [validation disabled]
    Source: 192.168.1.2 (192.168.1.2)
    Destination: 50.7.28.210 (50.7.28.210)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 52485 (52485), Dst Port: macromedia-fcs (1935), Seq: 1538, Ack: 3074, Len: 1994
    Source port: 52485 (52485)
    Destination port: macromedia-fcs (1935)
    [Stream index: 1]
    Sequence number: 1538    (relative sequence number)
    [Next sequence number: 3532    (relative sequence number)]
    Acknowledgment number: 3074    (relative ack number)
    Header length: 20 bytes
    Flags: 0x018 (PSH, ACK)
    Window size value: 16698
    [Calculated window size: 66792]
    [Window size scaling factor: 4]
    Checksum: 0x108a [validation disabled]
    [SEQ/ACK analysis]
Real Time Messaging Protocol (Handshake C2)
    Handshake C2
Real Time Messaging Protocol (AMF0 Command connect('flash'))
    Response to this call in frame: 23
    RTMP Header
        00.. .... = Format: 0
        ..00 0011 = Chunk Stream ID: 3
        Timestamp: 1
        Body size: 443
        Type ID: AMF0 Command (0x14)
        Stream ID: 0
    RTMP Body
        String 'connect'
            AMF0 type: String (0x02)
            String length: 7
            String: connect
        Number 1
            AMF0 type: Number (0x00)
            Number: 1
        Object (11 items)
            AMF0 type: Object (0x03)
            Property 'app' String 'flash'
            Property 'flashVer' String 'WIN 13,0,0,182'
            Property 'swfUrl' String 'http://static2.sawlive.tv/player.swf'
            Property 'tcUrl' String 'rtmp://50.7.28.210/flash'
            Property 'fpad' Boolean false
            Property 'capabilities' Number 239
            Property 'audioCodecs' Number 3575
            Property 'videoCodecs' Number 252
            Property 'videoFunction' Number 1
            Property 'pageUrl' String 'http://sawlive.tv/embed/watch/ZkMjc5MTU0ZTQ4Y2Y0MmVhOjNiNjYzNmQ5NjUyMWM0ZDUwNDkyNjAwMWMwOTI5MzYx/ODVlOGMwZjYyOTBiOmFmNzQ3MjY1NzQzMjoxNzA5NDJmZjg5OWEyMWJiYWIwOGQ5MW'
            Property 'objectEncoding' Number 0
            End Of Object Marker