Mystery ts file

KSTHA

KSTHA

Member
My Satellite Setup
KU Band 75cm and C Band 180cm with TBS6902 card
My Location
Samut Prakan, Thailand
So I recorded this TS file from Superbird B3 satellite. It's encrypted. Is there anyway to know which encryption scheme implemented?

mega.nz

MEGA

MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now
mega.nz mega.nz
 
TV broadcast / feed or is it from the military payload on B3?
 
KSTHA said:
So I recorded this TS file from Superbird B3 satellite. It's encrypted. Is there anyway to know which encryption scheme implemented?

mega.nz

MEGA

MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now
mega.nz mega.nz
Click to expand...



According to a TS Analyser it is not encrypted, there is no Conditional Access ID present in the ts and neither the Video PID or Audio PID are showing with encrypted status. It might be 4:2:2 video as that does not always show up in a TS Analyser, it generally does but not 100% of the time.

.
scan.jpg
 
Nah, it's japanese concert. I suspected It's BISS-CA. But no way to know it
 
The file was unencrypted in the first half, then followed by encrypted part. I cut only encrypted part and sent you. Therefore, the encrypt flag is not there.
 
dvbsnoop shows list of IP addresses. perhaps satellite internet.
Table_ID: 76 (0x4c) [= IP/MAC Notification Table (INT) [EN 301 192]]
DSM_CC-INT-UNT-DescriptorTag: 9 (0x09) [= target_IP_address_descriptor]
IPv4_addr_mask: 6b6dda46 [= 107.109.218.70]
IPv4_addr: e92dfe32 [= 233.45.254.50]
IPv4_addr: a2c189f2 [= 162.193.137.242]
IPv4_addr: fc1cdacb [= 252.28.218.203]
IPv4_addr: b10351a9 [= 177.3.81.169]
IPv4_addr: 3dbdb8f9 [= 61.189.184.249]
IPv4_addr: f2194006 [= 242.25.64.6]
IPv4_addr: a19b1532 [= 161.155.21.50]
IPv4_addr: 45f3df96 [= 69.243.223.150]
IPv4_addr: c04a0d12 [= 192.74.13.18]
IPv4_addr: 2e19963e [= 46.25.150.62]
IPv4_addr: 99c68b02 [= 153.198.139.2]
IPv4_addr: 670619ef [= 103.6.25.239]
IPv4_addr: b289e0d3 [= 178.137.224.211]
IPv4_addr: 21564f70 [= 33.86.79.112]
IPv4_addr: 1379e208 [= 19.121.226.8]
IPv4_addr: e5974bd4 [= 229.151.75.212]
IPv4_addr: cb156775 [= 203.21.103.117]
IPv4_addr: 5165d152 [= 81.101.209.82]
IPv4_addr: 72fae26f [= 114.250.226.111]
IPv4_addr: c7aba38d [= 199.171.163.141]

DVB-DescriptorTag: 121 (0x79) [= S2_satellite_delivery_system_descriptor]
descriptor_length: 226 (0xe2)
scrambling_sequence_selector: 0 (0x00)
multiple_input_stream_flag: 0 (0x00)
backwards_compatibility_indicator: 0 (0x00)
reserved_future_use: 8 (0x08)
 
dmaavrigdo said:
dvbsnoop shows list of IP addresses. perhaps satellite internet.
Table_ID: 76 (0x4c) [= IP/MAC Notification Table (INT) [EN 301 192]]
DSM_CC-INT-UNT-DescriptorTag: 9 (0x09) [= target_IP_address_descriptor]
IPv4_addr_mask: 6b6dda46 [= 107.109.218.70]
IPv4_addr: e92dfe32 [= 233.45.254.50]
IPv4_addr: a2c189f2 [= 162.193.137.242]
IPv4_addr: fc1cdacb [= 252.28.218.203]
IPv4_addr: b10351a9 [= 177.3.81.169]
IPv4_addr: 3dbdb8f9 [= 61.189.184.249]
IPv4_addr: f2194006 [= 242.25.64.6]
IPv4_addr: a19b1532 [= 161.155.21.50]
IPv4_addr: 45f3df96 [= 69.243.223.150]
IPv4_addr: c04a0d12 [= 192.74.13.18]
IPv4_addr: 2e19963e [= 46.25.150.62]
IPv4_addr: 99c68b02 [= 153.198.139.2]
IPv4_addr: 670619ef [= 103.6.25.239]
IPv4_addr: b289e0d3 [= 178.137.224.211]
IPv4_addr: 21564f70 [= 33.86.79.112]
IPv4_addr: 1379e208 [= 19.121.226.8]
IPv4_addr: e5974bd4 [= 229.151.75.212]
IPv4_addr: cb156775 [= 203.21.103.117]
IPv4_addr: 5165d152 [= 81.101.209.82]
IPv4_addr: 72fae26f [= 114.250.226.111]
IPv4_addr: c7aba38d [= 199.171.163.141]

DVB-DescriptorTag: 121 (0x79) [= S2_satellite_delivery_system_descriptor]
descriptor_length: 226 (0xe2)
scrambling_sequence_selector: 0 (0x00)
multiple_input_stream_flag: 0 (0x00)
backwards_compatibility_indicator: 0 (0x00)
reserved_future_use: 8 (0x08)
Click to expand...

Interesting, but why it shows up as AVC?
 
Analoguesat said:
TV broadcast / feed or is it from the military payload on B3?
Click to expand...

BTW, it's known that this TP was used to transmitted BISS encrypted feed for a long time. They just changed the encryption scheme.
 
Update: Tried Rainbow Tool and it looks like BISS-E or BISS-CA
1583675889195.webp
 
Analoguesat said:
TV broadcast / feed or is it from the military payload on B3?
Click to expand...

Actually, I tried to record again. It reveals these. Not sure what encryption scheme it's using.

Using all PIDs
Using file limit: 4096 MByte
File length: 2536 MByte
UsingFileLen: 2660034560 bytes
Reading file ...
Searching ...
Using payload size: 184
PID: 200h B8h-Crypt8:00 93 D9 8F BD 40 1B 72 [E] Count:4832178
PID: 200h B8h-Crypt8:00 93 D9 8F BD 40 1B 72 [O] Count:4613112
PID: 200h B8h-Crypt8:E5 5B 94 4D DE DB CC 53 [O] Count:11559
PID: 200h B8h-Crypt8:E5 5B 94 4D DE DB CC 53 [E] Count:10685
PID: 200h B8h-Crypt8:45 4F EF 21 A4 F4 DC 8D [O] Count:4031
PID: 200h B8h-Crypt8:45 4F EF 21 A4 F4 DC 8D [E] Count:3669
PID: 200h B8h-Crypt8:84 28 05 78 E5 65 F0 4D [O] Count:1324
PID: 200h B8h-Crypt8:A2 F0 D4 25 03 DC 50 F5 [E] Count:1118
...

Can It possibly be BISS with Odd/Even CW?
 
Back
Top