Registered a URL and setup a forum as the IPCam stuff really needed its own site vs my irregular blog posts about IPCam hacking at

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - celem

Pages: [1] 2 3 ... 25
General Discussion / Article: Reverse-Engineering an IP camera
« on: March 30, 2019, 12:47:02 pm »
FYI - Link below is to an interesting 3-part article on Reverse-Engineering a newer type IP camera

Hacking & Modding / IP camera teardown and getting root password
« on: April 04, 2016, 07:01:01 pm »
Below is a link to an excellent article about hacking a  Logilink WC0030A / Apexis APM-JP8015-WS IP-Camera.

For $43 (delivered) I recently purchased a small, outdoor 720P ONVIF camera from China via eBay. It took a little over a month to arrive, but it did arrive. See attached screen capture of its eBay listing page. It is quite small - the camera body measures 3.75x2.75x2.75 inches. The image quality is quite nice - see the attachment.

It, like most Chinese IP-Cameras is MicroSoft Internet Explorer (IE) centric, meaning that full utility is achieved only by using IE with the camera's downloaded ActiveX installed. While I did test the camera in a Windows XP VirtualBox, I use Linux, not Microsoft products. Consequentially, this camera is sub-par for non-Microsoft use. Nonetheless, it is useful. I mostly monitor my cameras on either my Android phone or tablet and I can configure it for good operation on Android. On the Android, my preferred app is "IP Cam Viewer" by Robert Chou. It is excellent for my MJPEG and pretty good for ONVIF cameras. The other Android app that I use is just for ONVIF cameras - "Onvifer" by IPCentcom. Its image quality for ONVIF is excellent. On my desktop, I use VLC for image viewing.

The camera that I received has a wide-angle 3.6mm lens. I think that I would prefer the 6mm or 8mm as there is some edge distortion with the 3.6mm lens.

The camera's factory is Shenzhen Hong Jing Tian Electronics. The manufacturer is listed as "IPCAM" and the model as "C6F0SeZ3N0P0L0". The WiFI card identifies itself as Shenzen Oqemray Technology. The Shenzen Oqemray Technology website only lists peripherals like WiFi cards on their website.

The IP address arrives fixed at "", although DHCP can be activated, if desired.

The eBay seller that I used is affiliated with the factory. The seller's eBay name is "szhongjingtian". In an email, szhongjingtian signed her name as an employee of Shenzhen HONGJINGTIAN Electronics Co., Ltd.

FYI - this is how I access via RTSP:

rtsp://myURL/11  (Note 11 is HD & 12 is SD)

If you use Windows OS you can utilize the software that comes with the camera.

NOTE: The PDF file at the link below is for a camera with the same camera PCB. All CGI commands from it that I have tried also work with this camera:

I have a ONVIF camera (not Foscam). I am interested in the same thing but don't currently have the time to pursue it.

Just a thought, and maybe I'm off track but in looking at the library source for the Open Source project "ONVIF Device Manager" I see that the authors are using uses ffmpeg for media decoding.

Please post your progress.

General Discussion / Re: Stuck on which Camera to buy
« on: July 25, 2013, 09:02:55 am »
First, make sure that your os and preferred browser can support the H.264 stream. Compatibility is an issue.

... I got no idea what Foscam firmware/web UI versions are compatible with it !...

Answer, none. The WebUI would probably work but possibly not all functions - ditti for the kernel although it is more dubious and romfs is VERY unlikely to work. Subtle hardware differences, especially around the sensor makes cross-brand compatibility virtually nil.

Hacking & Modding / Re: How to open Foscam FI8918W?
« on: March 30, 2013, 11:36:22 am »
Did you look under the rubber feet?

General Discussion / TL-WR703N
« on: February 17, 2013, 10:00:56 am »
Recently I loaded openWRT onto a $21 TP-LINK TL-WR703N. While fine tuning the TL-WR703N I came across an interesting code module that can be loaded onto a TL-WR703N with attached camera that tracks motion. It occurred to me that this "motion" package might be applicable to IP-Cameras, as well. You can read about installing the "motion" package on the TL-WR703N HERE, and about the motion package HERE.

You can even turn the tl-wr703n into a camera using firmware packages found at the blog.

Firmware / Re: Bricked my easyn M136
« on: February 17, 2013, 09:48:26 am »
EasyN has good support and will email you the firmware to restore the camera. Read the post HERE. When you receive the firmware from EasyN please post it in the files section to help others in the future.

Also, read THIS.

The resolution is quite nice.

Hacking & Modding / Re: Wansview NCB543W
« on: February 08, 2013, 06:49:30 pm »

The comm_write.cgi command sends a string out the serial console. You must open up the camera and connect to the serial console within. Once connected correctly you can bring the 3 wires out of the camera and connect to your Arduino. Be aware that the Arduino is a 5V device and the camera is a 3.3V device so the Arduino's TX line will need diode isolation and a pullup resistor to 3.3V to avoid damaging the camera.

Read the wiki on this site HERE and HERE for some help on connecting. There are also many posts on the topic of serial connection such as HERE. There also good instructions HERE. There is info on diode isolation of the 5V Arduino from the 3.3V camera HERE.

Good luck and be sure to share your results.

P.S.: When I experimented with the comm_write.cgi command, the serial sent out some error message but, IMPORTANTLY, it also sent out the text sent in the comm_write.cgi command, enabling your Arduino to monitor and react to the cammand.

General Discussion / Re: Wansview NCH532MW: alarm connector sequence???
« on: February 08, 2013, 06:33:59 pm »
The connector is basically the same for all of these cameras. Take a look at THIS-LINK for an example.

Pins 1 and 2 are controlled by a DC 5V relay. If you click on the chain icon in the operator device control, the normally open contacts of pins 1 and 2 will close until you click on the break-chain icon. If “I/O Linkage on Alarm” is set, Pins 1&2 will close upon a short of pins 3&4, and remain closed until reset by click on the break-chain icon.

The current limits for this relay connected between I/O Alarm pins 1 & 2 are a Maximum current of 2A/24VDC, 2A/125VAC.

Hacking & Modding / Re: Wansview NCB543W
« on: January 02, 2013, 08:04:27 pm »
On the NCB 541W I tested the comm_write.cgi. Using it you can send a string out the serial console. I have considered adding a microcontroller, such as an Arduino Pro Mini to monitor the serial port to capture my commands sent via the comm_write.cgi and do stuff. Since I didn't have any particular "stuff" in mind, I didn't pursue it.

General Discussion / Re: Foscam on the Web
« on: December 04, 2012, 09:39:22 pm »
umbra - as far as reliability goes, I had a FOSCAM I8909 under my porch overhang for three years. It is an indoor camera but survived just fine in an occasionally very moist environment with temperatures down to 6 degrees Fahrenheit in the winter and up to the 90s in the summer. It never missed a beat and always worked. It would still work now but I removed it last month while the house was being painted and I have not put it back. The I8909 is stationary (no pan/tilt) and has no IR-CUT, so there is less to go wrong.

When you consider reliability recall the Mean Time Between Failure formula [MTBF = 1/(sum of all the part failure rates)]. The more parts/complexity, the more often there is a failure.

Consider a mature proven product with a good track record that meets your needs. I personally don't value the IR-CUT feature as it adds a lot of complexity just so that daytime colors will be more true. I don't care if trees are not true green so long as I can see the objects or movement that are of interest to me.

Pages: [1] 2 3 ... 25