Jump to content
Sign in to follow this  
amuso

Brandless H264 access streams

Recommended Posts

Hi,

 

I recently bought a analog 8-channel DVR. With it came some Windows software (DVR Client 3.6.4) that uses a lvrweb plugin (also seen called lvr client and lvr view).

 

I am wondering if anybody has any experience in accessing their video streams directly, either as still JPGs or MJPEGs or something similar ?

 

This DVR uses port 7777 to communicate with the client software. However on port 80 there seems to be a webservice that uses the mini-httpd software. Port 8888 is also used by an iPhone app (Naway / Naway+) to display streams remotely, or locally wirelessly.

 

I would really like to capture single images from either all, or single cameras without needing any dedicated software. Ideally it would be nice to be able to access the h.264 streams the iPhone app uses also.

 

I've attached a screengrab of the software that came with the unit. There is no company or contact information to the manufacturer. Hopefully someone here has a bit more insight into these matters...

DVR.jpg.483be7052dba2645ecd9baf11be54e68.jpg

1182363990_WEB_ImageDVR8kanalsforvideolydBNCSATA-1268378860.Jpeg.0d7bd41de533e1bf169d6fa420b10f08.Jpeg

Share this post


Link to post
Share on other sites

I'm in the same boat as you, I've got a Nightowl and I'm looking to do the same. Several of the computers I use either don't support the web browser plugins or I don't have admin on them to install it.

 

I think your best bet is to use a proxy server to snoop the traffic or do some packet sniffing.

Share this post


Link to post
Share on other sites

I actually think I managed to track down the manufacturer, so I have sent them an email to see if they can provide any insight on the matter.

 

It seems it might be produced by FJ Lang Lang and called LVR6008B-D (http://www.alibaba.com/product-gs/488326401/Discounted_16_D1_H_264_Network.html)

 

Also tried a bunch of different URLs, with no success:

 

rtsp://username:password@192.168.1.10:8888/live/ch01_0

rtsp://username:password@192.168.1.10:8888/live/ch01

rtsp://username:password@192.168.1.10:8888/live/01

rtsp://username:password@192.168.1.10:8888/live.sdp?CH=1

rtsp://username:password@192.168.1.10:8888/live.sdp?CH=01

rtsp://username:password@192.168.1.10:8888/live.sdp?cam=01

rtsp://username:password@192.168.1.10:8888/video.asf?CH=01

rtsp://username:password@192.168.1.10:8888/video.jpg?CH=01

rtsp://username:password@192.168.1.10:8888/live/MPEG4

rtsp://username:password@192.168.1.10:8888/live/MJPEG

rtsp://username:password@192.168.1.10:8888/live/H.264

 

Also tried other ports than 8888, such as 80, 554 and 558. However I am pretty 100% sure it uses port 8888 since that's all that needed opening in the firewall for external access with the Naway and Naway+ app.

 

I did actually do a bunch of tcpdump / network sniffing from both the Windows machine and iPhone to see if I could find an URL to extract. However it all seems encrypted as there is no plain text URLs to find. A bunch of traffic did get captured, but didn't make much sense.

 

Thanks for the tips. If I find out more I will post updates. Maybe someone else has other URLs for us to try out ? Might be something generic.

 

Port 80 lists mini-httpd/1.19 19dec2003 as the webserver.

Share this post


Link to post
Share on other sites

Google dirb and wfuzz. Both are tools that can hammer away at a webserver and guess URLs by bruteforce. I've combed my Nightowl this way.

 

If you can get an SDK manual from the mfg, that's definitely the way to go. I scrounged one up for my Foscam and it was a huge help.

Share this post


Link to post
Share on other sites

Cannot find the RTSP link there for my sunluxy (same as the one pictured in the 1st post on this thread)

 

Ideally i'd like to get it working in webcamxp.

 

Will post back with any findings.

 

Thanks

Share this post


Link to post
Share on other sites

Some news...

By trial and error I found out the streaming addresses which can be viewed by VLC (or VLC-plugin in iSpy e.g.):

 

http://aaa.bbb.ccc.ddd/cgi-bin/view.cgi?chn=0&u=USER&p=PASSWORD --> Channel 1

http://aaa.bbb.ccc.ddd/cgi-bin/view.cgi?chn=1&u=USER&p=PASSWORD --> Channel 2

and so on

 

By this iSpy streams all 8 channels of the DVR since yesterday without any problems (about 11fps).

 

Before that I used the preview images of the remote settings->color menu of the web interface:

http://aaa.bbb.ccc.ddd/cgi-bin/snapshot.cgi?chn=0&f=1&u=USER&p=PASSWORD&rnd=0.xyz... (xyz differs depending on channel) Just copy the link to this preview images from web browser.

But the quality is poor and the DVR hangs up after a while (probably to many and to fast server requests for the jpegs).

Share this post


Link to post
Share on other sites

I must say sorry for my poor english.

 

but i am very happy to share my finding

 

rtsp://aaa.bbb.ccc.ddd:554/user=xxxxx&password=xxxxx&channel=1&stream=.sdp?real_stream--rtp-caching=100

 

How to find it ? There is a website to view the cam, and I trace the website source code , and find the rstp keyword at the javascript.

 

Wrong Thinking:

There is a mobile apps (android) to view the cam, I try to decompile it and recompile it with a message box (toast), but the mobile using protocol with port 34567.

 

Thank you for your share.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×