I felt pretty confident that the underlying video was using a well-known protocol (especially since the camera seemed to have dedicated video encoding hardware). In order to figure out whatever encryption and/or obfuscation the protocol was using, I planned to reverse engineer the firmware. Now Wireshark could show me the payload lengths and message IDs. This was easy and fun: Wireshark lets you write dissectors in Lua ( disclaimer: your definition of fun may vary). With what I knew, I was able to write a “Baichuan” protocol dissector for Wireshark using Mika’s awesome tutorial. In my experience, such tools immediately pay back your time investment by a factor of 4 or more. Dissecting traffic with WiresharkĪlways, always spend time developing debug or analysis tools. Time to extract what I could-the header layout was correct-and move on. The payload appeared to be encrypted in my captures.įurthermore, the code wouldn’t even run due to some questionable pointer juggling. On a lark, I Googled this, and actually found a project on GitHub from 2015 which was attempting to retrieve data from Swann cameras!Ī quick look at the code told me that although they share the sync word and packet header, the protocols for my camera and these older cameras were very different. The only thing that jumped out to me was the appearance of a sync word at the beginning of each packet, 0xf0debc0a. The end result is a new piece of open-source software called Neolink, which allows Blue Iris, Shinobi, or other NVR software to receive video from unmodified Reolink cameras.Īs a first step, I fired up Wireshark and captured traffic between the camera and its official Reolink PC client 1. Most non-triumphant.īogus enough that I decided to pwn the camera, reverse engineer the protocol, and write my own software to get the video stream. This was, in the immortal words of Bill and Ted, bogus. Then, barely outside my return window, Reolink updated their support page to say that the cameras would only work with their 8-channel NVR or proprietary viewer apps. However, I bought these cameras because I believed they supported open standards such as ONVIF, so I’d just swap the NVR for a copy of Blue Iris running on my server.Īt the time, the Reolink support page clearly indicated that all of their non-battery-powered cameras supported RTSP.Īfter the system was installed, it became apparent that the cameras did not in fact support RTSP-the only port open on them was port 9000. Unfortunately, the NVR is pretty anemic: it’s clearly an existing model with slight changes to support 4K cameras, and it struggles to support more than one viewer at a time. It came in a “kit” of six cameras and an NVR (a dedicated recording box that also powers the cameras). It’s fairly nice hardware, actually-it has a 4K video sensor, a microphone, power over Ethernet, and is nominally waterproof. Way back in late 2019, I dissected a Reolink B800 IP camera to demonstrate the various parts of an embedded Linux system. A brief history of the Baichuan protocol.I really need to have this device added on the client on my PC, so then I can start setting it up, viewing the camera in constant stream mode over my phone does nothing for me at the moment. So what am I doing wrong? I have searched various guides but am at a loss here why nothing shows up when I do the scan device. Input the password(default is blank), If you have already created a password on reolink app you will need to use the password to loginīasically step 2 scan device to find the camera, is showing nothing back. The 4 step guide I received basically step 1 wasĭouble click the device you want to add,and then the device info will be displayed I have tried IP address, uid etc so far.įor add a device using UID wouldn't I be able to manually enter the numbers above the scan code to use? When I do, there was never a username setup for it, I tried it both ways and with admin or with blank username login it fails to connect. Yet I still cannot figure out why adding a device doesn't work. Now I can see a live stream via my phone, or other phone I login with to test. Finally I installed the phone app, scanned the thing on the camera itself. Scanning devices on the network nothing showed up, despite it clearly being there. I have been over all the instructions I got a few times, Nothing was letting me set my camera up.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |