Action Message Format


Action Message Format is a binary format used to serialize object graphs such as ActionScript objects and XML, or send messages between an Adobe Flash client and a remote service, usually a Flash Media Server or third party alternatives. The Actionscript 3 language provides classes for encoding and decoding from the AMF format.
The format is often used in conjunction with Adobe's RTMP to establish connections and control commands for the delivery of streaming media. In this case, the AMF data is encapsulated in a chunk which has a header which defines things such as the message length and type.

Format analysis

AMF was introduced with Flash Player 6, and this version is referred to as AMF0. It was unchanged until the release of Flash Player 9 and ActionScript 3.0, when new data types and language features prompted an update, called AMF3. Flash Player 10 added vector and dictionary data types documented in a revised specification of January 2013.
Adobe Systems published the AMF binary data protocol specification in December 2007 and announced that it will support the developer community to make this protocol available for every major server platform.

AMF self-contained packet

The following amf-packet is for transmission of messages outside of defined Adobe/Macromedia containers or transports such as Flash Video or the Real Time Messaging Protocol.
LengthNameTypeDefault
16 bitsversionuimsbf0 or 3
16 bitsheader-countuimsbf0
header-count*56+ bitsheader-type-structurebinaryfree form
16 bitsmessage-countuimsbf1
message-count*64+ bitsmessage-type-structurebinaryfree form

LengthNameTypeDefault
16 bitsheader-name-lengthuimsbf0
header-name-length*8 bitsheader-name-stringUTF-8empty
8 bitsmust-understanduimsbf0
32 bitsheader-lengthsimsbfvariable
header-length*8 bitsAMF0 or AMF3binaryfree form

LengthNameTypeDefault
16 bitstarget-uri-lengthuimsbfvariable
target-uri-length*8 bitstarget-uri-stringUTF-8variable
16 bitsresponse-uri-lengthuimsbf2
response-uri-length*8 bitsresponse-uri-stringUTF-8"/1"
32 bitsmessage-lengthsimsbfvariable
message-length*8 bitsAMF0 or AMF3binaryfree form

If either the header-length or message-length are unknown then they are set to -1 or 0xFFFFFFFF
uimsbf: unsigned integer, most significant bit first
simsbf: signed integer, most significant bit first

AMF0

The format specifies the various data types that can be used to encode data. Adobe states that AMF is mainly used to represent object graphs that include named properties in the form of key-value pairs, where the keys are encoded as strings and the values can be of any data type such as strings or numbers as well as arrays and other objects. XML is supported as a native type. Each type is denoted by a single byte preceding the actual data. The values of that byte are as below :
AMF objects begin with a followed by a set of key-value pairs and end with a as value. Keys are encoded as strings with the 'type-definition' byte being implied. Values can be of any type including other objects and whole object graphs can be serialized in this way. Both object keys and strings are preceded by two bytes denoting their length in number of bytes. This means that strings are preceded by a total of three bytes which includes the 0x02 type byte. Null types only contain their type-definition. Numbers are encoded as double-precision floating point and are composed of eight bytes.
As an example, when encoding the object below in actionscript 3 code.

var person:Object = ;
var stream:ByteArray = new ByteArray;
stream.objectEncoding = ObjectEncoding.AMF0; // ByteArray defaults to AMF3
stream.writeObject;

The data held in the ByteArray is:
Hex codeASCII
03 00 04 6e 61 6d 65 02 00 04 4d 69 6b 65 00 03 61 67 65 00 40 3e 00 00 00 00 00 00 00 05 61 6c 69 61 73 02 00 04 4d 69 6b 65 00 00 09
. .. n a m e ... M i k e .. a g e. @ > ........ a l i a s ... M i k e ...

Note: the object properties can be sorted in a different order from the one in which they are placed in actionscript. For coloring/markup, refer to the legend below.
The code above will work only for built-in classes like Object. To serialise and deserialise custom classes, the user needs to declare them using the registerClassAlias command or else an error will be thrown by the player.

// for a hypothetical class Person
registerClassAlias;

Although, strictly speaking, AMF is only a data encoding format, it is usually found encapsulated in a RTMP message or Flex RPC call. An example of the former can be found below :
Hex codeASCII
03 00 00 00 00 01 05 14 00 00 00 00 02 00 07 5F 72 65 73 75 6C 74 00 3F F0 00 00 00 00 00 00 03 00 06 66 6D 73 56 65 72 02 00 0E 46 4D 53 2F 33 2C 35 2C 35 2C 32 30 30 34 00 0C 63 61 70 61 62 69 6C 69 74 69 65 73 00 40 3F 00 00 00 00 00 00 00 04 6D 6F 64 65 00 3F F0 00 00 00 00 00 00 00 00 09 03 00 05 6C 65 76 65 6C 02 00 06 73 74 61 74 75 73 00 04 63 6F 64 65 02 00 1D 4E 65 74 43 6F 6E 6E 65 63 74 69 6F 6E 2E 43 6F 6E 6E 65 63 74 2E 53 75 63 63 65 73 73 00 0B 64 65 73 63 72 69 70 74 69 6F 6E 02 00 15 43 6F 6E 6E 65 63 74 69 6F 6E 20 73 75 63 63 65 65 64 65 64 2E 00 04 64 61 74 61 08 00 00 00 01 00 07 76 65 72 73 69 6F 6E 02 00 0A 33 2C 35 2C 35 2C 32 30 30 34 00 00 09 00 08 63 6C 69 65 6E 74 49 64 00 41 D7 9B 78 7C C0 00 00 00 0E 6F 62 6A 65 63 74 45 6E 63 6F 64 69 6E 67 00 40 08 00 00 00 00 00 00 00 00 09............... _ r e s u l t. ?.......... f m s V e r... F M S / 3 2 0 0 4.. c a p a b i l i t i e s. @ ?........ m o d e. ?............. l e v e l... s t a t u s.. c o d e... N e t C o n n e c t i o n. C o n n e c t. S u c c e s s.. d e s c r i p t i o n... C o n n e c t i o n s u c c e e d e d... d a t a....... v e r s i o n... .... c l i e n t I d. A.. x...... o b j e c t E n c o d i n g. @..........

legend: object start/end object keys object values ecma_array
The AMF message starts with a 0x03 which denotes an RTMP packet with Header Type of 0, so 12 bytes are expected to follow. It is of Message Type 0x14, which denotes a command in the form of a string of value "_result" and two serialized objects as arguments. The message can be decoded as follows:

"_result"
1
,


Here one can see an array as a value of the 'data' key which has one member. We can see the objectEncoding value to be 3. This means that subsequent messages are going to be sent with the 0x11 message type, which will imply an AMF3 encoding.

AMF3

The latest version of the protocol specifies significant changes that allow for a more compressed format. The data markers are as follows:
The first 4 types are not followed by any data.
Additional markers used by Flash Player 10 are as follows:
AMF3 aims for more compression and one of the ways it achieves this is by avoiding string duplication by saving them into an array against which all new string are checked. The byte following the string marker is no longer denoting pure length but it is a complex byte where the least significant bit indicated whether the string is 'inline' i.e. not in the array or 'reference' in which case the index of the array is saved. The table includes keys as well as values.
In older versions of Flash player there existed one number type called 'Number' which was a 64-bit double precision encoding. In the latest releases there is an int and a uint which are included in AMF3 as separate types. Number types are identical to AMF0 encoding while Integers have variable length from 1 to 4 bytes where the most significant bit of bytes 1-3 indicates that they are followed by another byte.

Support for AMF

The various AMF Protocols are supported by many server-side languages and technologies, in the form of libraries and services that must be installed and integrated by the application developer.
Platforms:
Frameworks: