Brandless H264 access streams

[amuso 0]

Hi,

 

I recently bought a analog 8-channel DVR. With it came some Windows software (DVR Client 3.6.4) that uses a lvrweb plugin (also seen called lvr client and lvr view).

 

I am wondering if anybody has any experience in accessing their video streams directly, either as still JPGs or MJPEGs or something similar ?

 

This DVR uses port 7777 to communicate with the client software. However on port 80 there seems to be a webservice that uses the mini-httpd software. Port 8888 is also used by an iPhone app (Naway / Naway+) to display streams remotely, or locally wirelessly.

 

I would really like to capture single images from either all, or single cameras without needing any dedicated software. Ideally it would be nice to be able to access the h.264 streams the iPhone app uses also.

 

I've attached a screengrab of the software that came with the unit. There is no company or contact information to the manufacturer. Hopefully someone here has a bit more insight into these matters...

[yakky 0]

I'm in the same boat as you, I've got a Nightowl and I'm looking to do the same. Several of the computers I use either don't support the web browser plugins or I don't have admin on them to install it.

 

I think your best bet is to use a proxy server to snoop the traffic or do some packet sniffing.

[amuso 0]

I actually think I managed to track down the manufacturer, so I have sent them an email to see if they can provide any insight on the matter.

 

It seems it might be produced by FJ Lang Lang and called LVR6008B-D (http://www.alibaba.com/product-gs/488326401/Discounted_16_D1_H_264_Network.html)

 

Also tried a bunch of different URLs, with no success:

 

rtsp://username:password@192.168.1.10:8888/live/ch01_0

rtsp://username:password@192.168.1.10:8888/live/ch01

rtsp://username:password@192.168.1.10:8888/live/01

rtsp://username:password@192.168.1.10:8888/live.sdp?CH=1

rtsp://username:password@192.168.1.10:8888/live.sdp?CH=01

rtsp://username:password@192.168.1.10:8888/live.sdp?cam=01

rtsp://username:password@192.168.1.10:8888/video.asf?CH=01

rtsp://username:password@192.168.1.10:8888/video.jpg?CH=01

rtsp://username:password@192.168.1.10:8888/live/MPEG4

rtsp://username:password@192.168.1.10:8888/live/MJPEG

rtsp://username:password@192.168.1.10:8888/live/H.264

 

Also tried other ports than 8888, such as 80, 554 and 558. However I am pretty 100% sure it uses port 8888 since that's all that needed opening in the firewall for external access with the Naway and Naway+ app.

 

I did actually do a bunch of tcpdump / network sniffing from both the Windows machine and iPhone to see if I could find an URL to extract. However it all seems encrypted as there is no plain text URLs to find. A bunch of traffic did get captured, but didn't make much sense.

 

Thanks for the tips. If I find out more I will post updates. Maybe someone else has other URLs for us to try out ? Might be something generic.

 

Port 80 lists mini-httpd/1.19 19dec2003 as the webserver.

[yakky 0]

Google dirb and wfuzz. Both are tools that can hammer away at a webserver and guess URLs by bruteforce. I've combed my Nightowl this way.

 

If you can get an SDK manual from the mfg, that's definitely the way to go. I scrounged one up for my Foscam and it was a huge help.

[Dan321 0]

Hi

 

Did you get any further with this?

 

Thanks

[MaxIcon 0]

There's a big collection of RTSP links here:

http://www.soleratec.com/rtsp/

 

If yours isn't there, be sure to add it when you figure it out!

[Dan321 0]

Cannot find the RTSP link there for my sunluxy (same as the one pictured in the 1st post on this thread)

 

Ideally i'd like to get it working in webcamxp.

 

Will post back with any findings.

 

Thanks

[angus_macgyver 0]

Some news...

By trial and error I found out the streaming addresses which can be viewed by VLC (or VLC-plugin in iSpy e.g.):

 

http://aaa.bbb.ccc.ddd/cgi-bin/view.cgi?chn=0&u=USER&p=PASSWORD --> Channel 1

http://aaa.bbb.ccc.ddd/cgi-bin/view.cgi?chn=1&u=USER&p=PASSWORD --> Channel 2

and so on

 

By this iSpy streams all 8 channels of the DVR since yesterday without any problems (about 11fps).

 

Before that I used the preview images of the remote settings->color menu of the web interface:

http://aaa.bbb.ccc.ddd/cgi-bin/snapshot.cgi?chn=0&f=1&u=USER&p=PASSWORD&rnd=0.xyz... (xyz differs depending on channel) Just copy the link to this preview images from web browser.

But the quality is poor and the DVR hangs up after a while (probably to many and to fast server requests for the jpegs).

[rtsp_guy 0]

Here is another site with a really detailed list of ip-camera manufacturers along with the RTSP URL listings... Seems to have even more companies and camera models then the other sites listed... Hope this helps someone else too.

 

http://www.securityhive.com/rtsp

[nelson.poon.at.work 0]

I must say sorry for my poor english.

 

but i am very happy to share my finding

 

rtsp://aaa.bbb.ccc.ddd:554/user=xxxxx&password=xxxxx&channel=1&stream=.sdp?real_stream--rtp-caching=100

 

How to find it ? There is a website to view the cam, and I trace the website source code , and find the rstp keyword at the javascript.

 

Wrong Thinking:

There is a mobile apps (android) to view the cam, I try to decompile it and recompile it with a message box (toast), but the mobile using protocol with port 34567.

 

Thank you for your share.