mroek

The bigger issue is that the combination admin/admin works for Onvif access no matter what password you have set for the admin account...

You were right!

The limit is 8, but only for access on the 37777-port. Login on the web interface works with longer passwords also.

 

Anyway, thanks a bunch! I'm going to change all passwords to 8 characters on these cameras, just to be on the safe (kind of an oxymoron, don't you agree) side.

9 characters in my password. Is there a max limit less than that, perhaps?

I'll experiment, perhaps you're onto something. I remember some Linux-version I worked with that ignored anything over 8 characters.

I've tested the Dahua Smart Player software, but it has one major flaw, as far as I can tell:

 

You have to navigate to each folder that contains video (.dav) files to add them to the view list. This is a major PITA, if you are trying to access the folder structure that the Dahua cameras create when they store events. The structure has many levels, here's an example from my camera (stored to my NAS via FTP from the camera):

 

\\NAS\ftpserver\TZC2LV0xxxxxxx\2013-02-24\001\dav\22

 

In this folder the events that occured between 22:00 and 22:59 on the 24th of Feb is stored. Fine, and it makes it easy to actually find a specific recording if you know when it happened. However, that's not what I typically want, what I want is to point the player application to a folder and have it traverse all the subfolders to add all the videos it can find, so that I can quickly play them (sequentially) to look for events.

 

The Dahua Smart Player actually looks like a fine piece of software, but it is still useless for what I want. Is there some way of making it do what I want? I think not, but I have been wrong before.

 

I've also looked at PSS, but that software doesn't even seem to have an interface for loading files from folders, it problably only works with files that it has written itself, and in my case that defeats the purpose, since the cameras store directly to my NAS.

When you mark areas in the grid, you should see the underlying image, so I'm guessing there's something wrong with your ActiveX-setup. You are using Internet Explorer, right?

I am using the latest version, and I have tried deleting the camera and re-adding it. The problem is not that the password is incorrect, I'm not that bad at typing passwords.

 

I also tried connecting to the camera via IP Cam Viewer on Android. Works fine with RTSP, but if I try the dedicated driver for Dahua HFW-cameras (which then tries to use port 37777, just as PSS), the same thing happens. IP Cam Viewer reports password error.

 

One other thing I've discovered, is that if you try to access the camera via Onvif Device manager, the user/password of admin/admin works regardless of how the user accounts are configured (major security flaw). I meant to mention this in my first post, but I forgot. If I try my real admin password in Onvif Device manager, then I get an error message that the login fails...

What's up with the user account system on the Dahua cameras? I have some HFW-2100 (got them a few days ago), and I have naturally changed the passwords on the accounts (admin/888888/666666). Today I tried installing PSS just to see how it works, and even though I can add cameras, PSS cannot login to them, and the accounts subsequently gets locked (for 30 minutes, apparently).

 

I am of course 100% certain that I have entered the correct password (which works on the web interface), but PSS (which tries to connect at port 37777) obviously manages to lock the account. Afterwards this account is also locked for login from the web interface (which it should be, as long as it is the same account).

 

Anyone have any insight here?

I observed this very same issue yesterday while playing with some online demo cameras. I would hazard a guess that this is somehow a bug in the ActiveX-control for these cameras.

It's a shame that (many of) the Chinese vendors sticks with a proprietary technology like ActiveX, and not something more modern that also works in other browsers than the dreaded MSIE.

9988 is a default port for the OnVif server.

 

In newer firmwares, DAHUA included it in it's 80 port server.

 

For security reasons, anyone can use only port 37777 (without forwarding 80 too).

Ok, but that means if you forward port 80, then anyone will be able to access the Onvif-server of the camera?

 

Does the web interface server listen to port 37777 also? So if you forward that port, you can access the web interface but still be protected by the user accounts (provided you have proper passwords on all of them)?

 

On a related note, I took a quick look at a Dahua firmware file that I downloaded, and it contained a number of file system images (squashfs and cramfs), so I guess that it might be possible to pre-modify a firmware to change both default passwords and other stuff. Of course, these images will be mounted on some flash memory in the camera, so it might be possible to modify stuff by manipulating the flash directly, perhaps with the dd command (if it is included).

99.99% you can't, since DAHUA uses a single executable to start all services (thus you cannot kill a service, modifiy a service's configuration files etc)

 

A good way would be to ask you seller for an older firmware

In general, newer firmwares should be better than older, and I feel quite strongly that Dahua should tighten up the security a little on these things.

 

Regarding the snapshot issue, GMaster1 reports that on his firmware, it works on the web port, but in generel it looks like it should only work on a specific port (9988). Could anyone confirm if that feature is restricted to port 9988 on the newest firmwares? If so, it will at least not be available on the WAN side unless this port is forwarded.

Just tried that app... Scary results.

 

(OP - Sorry to hijack this thread with a different discussion haha)

Well, I'm the OP, and I don't mind.

It is scary, no doubt. Not really sure what can be done about it either.

 

Did you test with Onvif Device Manager and just using admin/admin on your own camera, and got access?

See--and I thought that too until I tested mine from the outside. Only ports that are forwarded to it are the web port, 37777, and 554. It must be using the web port, as I can get the result by going "http://[WAN_IPP]/onvif/media_service/snapshot" (No 9988)

Hmm, that's not good.

I agree it has to use the web port, since when you omit a specific port number in the URL the browser will default to port 80.

It does seem to me as if the security aspect of these cameras isn't well taken care of. I don't have any cameras yet, but I have a shipment on it's way, and when I receive them I am going to look very closely at these things. I most certainly do not want to allow the entire internet to fetch snapshots from my cameras.

 

On a related note, I tried this with some online demo cameras that I found, but it didn't work. Could be because those had the web interface redirected to a different port. What did work, though, was to connect to it via Onvif Device Manager using admin/admin as user/pass. From there I could do lots of stuff, like reboot/reset/update firmware etc. Didn't actually do anything, of course, but I probably could have.

 

I gather that this would not have worked if the admin user had had a real password, but I'm not sure.

There any way to FTP/Telnet into the cam to remove that snapshot link feature? Kind of scary!

I don't know, but I agree that it should be possible to turn it off (or protect it by user/pass). However, the feature will not be available outside your LAN as long as you don't port-forward the port it uses. And if you need it to be invisible on your LAN, you could always block access in your firewall/router.

It can be done

 

Just make sure you'll get the NAS settings correctly!

Thanks! The interval you can set seems to range from 1 second to 1 day, which is fine. Is this feature available on all the Dahuas? Which camera/firmware was that interface screenshot taken from?

Don't have a clue if you can have it FTP snapshots on a schedule, like every 5 minutes. Nothing on the interface allows for that. You can FTP snapshots on motion detection or alarm input.

 

Using the URL you provided displays an image on a web browser. You can right click on the image and it saves as JPG.

 

They have an API so you can write a .net app to do what you want to do. Check the Bahamas Yellowpages forum, they have more info on this.

Thanks!

You have reviewed quite a number of Dahuas, so if it was possible from the interface I'd imagine that you'd have noticed.

 

My other plan should work, though. A script on the Synology NAS that invokes wget to retrieve snapshots from the camera should be feasible, I think. Perhaps even a better solution, since it would require no special configuration of the camera itself.

Hi,

 

I have some Dahua 2100 bullets on order, and I would like to be able to fetch images from them at regular intervals (i.e time lapse), and have the images stored on a Synology NAS. I've read the camera manual, but it isn't entirely clear whether this can be set up from within the camera itself. Is it possible to set up the camera to upload a snapshot image to a FTP-server at, say, 1 minute intervals?

 

If not, then I could possibly set up a script with wget on the Synology to download the images from the camera snapshot URL. Has anyone tried that method? What does the camera actually return at the URL:

 

http://ip-address:9988/onvif/media_service/snapshot

 

Does it give you a JPEG-image?

 

Any insight appreciated.

From this video:

 

 

...it looks like at least the HD2100 has a full range of adjustments. I would guess the HDB3200C is similar.

Again, thank you very much for the detailed information!

I will probably do some testing with just one camera first, because I think the prices of additional camera licenses for the Synology is ridiculous, at least when the product is very much less than perfect.

 

Your Synology is also a lot more powerful than mine (DS213+), so I might have to go for a dedicated solution, like an NVR or a computer with surveillance software on it.

 

The ideal solution would be if the cameras could do motion detection internally, and only stream video to the Synology when motion was detected (or if live view was requested from the web interface of the Synology). In that scenario, both network bandwidth and CPU load would be preserved under normal circumstances. Pre-event recording would have to be buffered in the cameras themself though, and I guess these cheap cams don't have enough memory for that.

It does say MEGA, it's just that the letter M is masked by the camera flash highlight.

Thanks for that piece of info.

Setting video recording to MJPEG is a significant downside, though, as it will make the recordings a lot bigger.

How much CPU and RAM does the motion detection consume for 6 cameras when everything is running?

Has anyone tried using the Dahua PSS software to just read files (stored by the cameras on motion detect events by FTP) from a NAS?

 

What kind of functionality would that give? Could the PSS software read the directory structure (from the NAS over CIFS/Samba) to provide an easy overview and a timeline, allowing fast searching and playback?

 

I don't have any Dahua cameras (yet), so it doesn't make much sense for me to install the PSS software as I would have no camera data to look at, so I'd appreciate any feedback.

Dahua specs say that it should use less than 6W, so for 12 V that would be a maximum of 0.5 A.

The downside is that I would then have to assign a computer to the task. My reason for using the NAS is that it is easier, already installed, and always on anyway.

 

I'm not sure I understood what you mean, surely the PSS software have to be running in order to receive and store the video events from the cameras?

Hi,

 

I am planning to buy a few Dahua bullet cameras (either HFW2100 or HFW3200S). I also own a Synology DS213+, and I am thinking of using this to store the video from the cameras. The best option seems to be the Surveillance Station package, at least if I want to easily browse the recorded events, and to access them remotely. The downside is that this software has quite a few shortcomings, and additional camera licenses are ridiculously expensive.

 

I have a few questions:

 

1) Is it possible to set motion detection in the Dahua camera to save some network bandwidth to the NAS? If motion detection is to be done with Surveillance Station, it will need to continuously stream the video from the camera, but perhaps it is possible to avoid that if the camera itself does the motion detection?

 

2) If yes to question 1), how does that actually work? Is there some kind of push protocol in use?

 

Another option is of course to use motion detection in the cameras, and have them upload event videos to the NAS by FTP, but then it is quite impractical to quickly get an overview of the events, as each file needs to be viewed in a Dahua player software (or converted to AVI by Dahua software). It would also be cumbersome to view recoreded events from remote (on my phone), although live view would be no problem, of course.

 

I am well versed in networking/software/electronics (engineer), but I am quite new to CCTV/Video surveillance, so don't be afraid to throw technical details in my face.