这种抓到的要怎么写规则啊tiny的

应用程序协议抖音（10498）主机HTTP(TCP)源pull-f5.douyinliving.com目的地10.215.173.1:48712状态58.144.241.26:80URL已关闭pull-f5.douyinliving.com:80/thirdgame/stream-405137047205446465 zexpsd5.flv?expire=1742651915&major_anchor_level=vip&s_anchor=1&sign=9e18b82978b5fa8fb11b99e1ddfedddb&unique_id=stream-405137047205446465_833_flv_zexpsd5&volcSecret=9e18b82978b5fa8fb11b99e1ddf字节流量包1.7 KB已接收—749B已发送持续时间6已接收一6已发送第一次见<1s最后一次见03/15/25 21:58:48.60103/15/25 21:58:48.634请求明文GET /thirdgame/stream-405137047205446465 zexpsd5.flv?expire=1742651915&major_anchor _level=vip&s anchor=1&sign=9e18b82978b5fa8fb11b99e1ddfedddb&unique_id=stream-405137047205446465 833 flv zexpsd5&volcSecret=9e18b82978b5fa8fb11b99e1ddfedddb&volcTime=1742651915& session id=037-20250315215834EC781128737B23650DFA.1742047115973.-464860212&maxIndex2=5&subIndex2=2 HTTP/1.1Accept:*/*Accept-Language:zh-CNConnection:Keep-AliveHost:pull-f5.douyinliving.com:80User-Agent:ByteDancePcdn