答案1
Wireshark 是正确的工具吗?
是的。
此 URL 应该是用于检查更新是否存在的 URL。这样正确吗?
是的。
如何找到下载更新的 URL?
看起来更新 URL 被打包在了http://update.videolan.org/vlc/status-win-x86(取自您的 Wireshark 数据)。当通过 http 访问该 URL(例如在浏览器中)时,返回的数据流是:
2.2.6
http://get.videolan.org/vlc/2.2.6/win32/vlc-2.2.6-win32.exe
VideoLAN and the VLC development team present VLC 2.2.6 "Umbrella".
VLC 2.2.6 is a security update fixing issues with subtitles and other formats, and improving DLL-loading security. VLC media player 2.2.0 was a major upgrade of VLC, introduced accelerated auto-rotation of videos, 0-copy hardware acceleration, support for UHD codecs, playback resume, integrated extensions and more than 1000 bugs and improvements.
返回具有不同 URL 的类似数据流http://update.videolan.org/vlc/status-win-x64:
2.2.6
http://get.videolan.org/vlc/2.2.6/win64/vlc-2.2.6-win64.exe
VideoLAN and the VLC development team present VLC 2.2.6 "Umbrella".
VLC 2.2.6 is a security update fixing issues with subtitles and other formats, and improving DLL-loading security. VLC media player 2.2.0 was a major upgrade of VLC, introduced accelerated auto-rotation of videos, 0-copy hardware acceleration, support for UHD codecs, playback resume, integrated extensions and more than 1000 bugs and improvements.
目前,VLC 3.0.1 似乎检查相同的 URL。
有趣的是,即使伪造 VLC 3.0.1 发送的 User-Agent 字符串 ( VLC/3.0.1 LibVLC/3.0.1
),也会返回与 VLC 2.2.6 相同的数据。据猜测,这可能意味着自动版本更新存在延迟(尽管是公开的),或者存在一些其他额外的(未知的)标准来确定正确的更新。