±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36317
New Yesterday: 0 Visitors: 204

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

What does the OH, OE tags refer to in Facebook Video URL?

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

mahsanqureshi
Member
 

What does the OH, OE tags refer to in Facebook Video URL?

Post Posted: Jun 10, 19 00:08

What does the OH, OE, and GDA fields represent in Facebook Picture/Video URLs?

For Example;

https://{hidden_for_privacy}23364315_n.jpg?oh=c566c56ca9fd7eb1ed5d8bfca4255e84&oe=544AF123&__gda__=1414682395_6d2cb778f5b2c857d1be1c781e81cdfa


what I found like abbreviations might be OH= object header (32 Bit) and GDA = Global Data Area but what is OE (8 Bit) for ? If Not, then what is the purpose of these parameters ? What does these parameters stands for and what they are referring to ? Please further explain in the light of below code, How to interpret that ?


One important finding I found in the below mentioned VIDEO artifacts recovered that; oh= & oe= tags are same that may exhibits the stream file as I verified from the URL as well. But the question is simple. What these oh & oe tags stands for?



{"videoID":2152405694981876,"manifest":[],"video":[

{"url":"https:\/\/scontent.fisb5-1.fna.fbcdn.net\/v\/t58.16807-6\/48093752_617068788804743_4293756961331085312_n.mp4?_nc_cat=110&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYmFzaWNfdjRfaHEyX2ZyYWdfMl92aWRlbyJ9&_nc_ht=scontent.fisb5-1.fna&oh=e89d31b829765208758429446cc9c623&oe=5CFA9D3C","start":0,"end":964,"segment_type":"init","mime_codec":"video\/mp4; codecs=\"avc1.4D401F\"","representation_id":"617068782138077v"},

{"url":"https:\/\/scontent.fisb5-1.fna.fbcdn.net\/v\/t58.16807-6\/48093752_617068788804743_4293756961331085312_n.mp4?_nc_cat=110&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYmFzaWNfdjRfaHEyX2ZyYWdfMl92aWRlbyJ9&_nc_ht=scontent.fisb5-1.fna&oh=e89d31b829765208758429446cc9c623&oe=5CFA9D3C","start":965,"end":1128,"segment_type":"sidx","mime_codec":"video\/mp4; codecs=\"avc1.4D401F\"","representation_id":"617068782138077v"},

{"url":"https:\/\/scontent.fisb5-1.fna.fbcdn.net\/v\/t58.16807-6\/48093752_617068788804743_4293756961331085312_n.mp4?_nc_cat=110&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYmFzaWNfdjRfaHEyX2ZyYWdfMl92aWRlbyJ9&_nc_ht=scontent.fisb5-1.fna&oh=e89d31b829765208758429446cc9c623&oe=5CFA9D3C","start":1129,"end":421284, "segment_type":"data","mime_codec":"video\/mp4
;  
 

Page 1 of 1