Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
there is some hex code in the rtsp:// links, I think thats how it goes anyways
 
Something like Little Snitch should get part of the address for you. The only difference between the RTSP address and the HTTP one is the server name.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.