I picked up a cheap china wireless IP camera set for a friend.
Bought locally for about us$70 equivalent. 4x wireless/wired cameras and recorder. No hard drive.
NVR is HI3536D based.
Camera I did not take apart yet. Mac address does not return manufacturer. 00:9a:15
aruljohn.com
Straight to the point for tl/dr crowd, fluff later in the post.
A wireshark capture between the camera and NVR shows HTTP encapsulated RTP?
en.wikipedia.org
Tried forcing VLC into this mode but failed to get any images.
mynuuo.zendesk.com
Port 554 was open so I tried a few URIs for Hisilicon. No go.
www.ispyconnect.com
Telnet was also open so tried a few logins. No go.
Wireshark capture of the webpage stream does not help much either.
It uses a flash app?
ONVIF Device Manager didn't get anything out of it either.
sourceforge.net
The alternative is if we can pull a stream out of the HI3536D NVR. Even if it is in the quadview screen.
At lease processing will get us into the general timeframe of the icendient.
Any help appreciated
--------
First impressions.
The cameras felt the part, all plastic and light.
Not sure how long they will last in the sun.
For the price if they go 2 years I will be happy.
The picture was surprisingly good. Day and night.
It was truly plug and play.
With open door security
Camera settings were locked down. Only basic ones available. No manual shutter range so no good for night LPR application.
The downfall with any cheap NVR is playback.
Motion detection outside fails miserably with any vegetation nearby.
I wanted to run them into something a bit more smart.
My program of choice is Sighthound.
The amount of time I have spent working on this I could have bought a few Dahua cameras.
But I persevere on principal and a good learning exercise
Bought locally for about us$70 equivalent. 4x wireless/wired cameras and recorder. No hard drive.
NVR is HI3536D based.
Camera I did not take apart yet. Mac address does not return manufacturer. 00:9a:15

MAC Address Lookup for 00:9A:15:A5:45:06 - OUI IAB IEEE Vendor Search
Find which vendor manufactured the device 00:9A:15:A5:45:06 . Which company manufactured the network card? MA-L, MA-M, MA-S. MAC Vendor details.
Straight to the point for tl/dr crowd, fluff later in the post.
A wireshark capture between the camera and NVR shows HTTP encapsulated RTP?
Code:
GET http://192.168.1.191:80/livestream/11?action=play&media=video_audio_data HTTP/1.1
User-Agent: HiIpcam/V100R003 VodClient/1.0.0
Connection: Keep-Alive
Cache-Control: no-cache
Authorization: Basic YWRtaW46
Content-Length: 59
Cseq: 1
Transport: RTP/AVP/TCP;unicast;interleaved=0-1
Code:
Session: 3
Cseq: 1
m=video 97 H265/90000/1920/1080
m=audio 8 G711/8000/2
Transport: RTP/AVP/TCP;unicast;hisiinterleaved=0-1;ssrc=00000003
Real-Time Streaming Protocol - Wikipedia
Tried forcing VLC into this mode but failed to get any images.

How to setup and configure VLC player to retrieve camera RTSP streaming?
Description Mainly purpose for this article is to guide you on how to setup and configure VLC player to retrieve camera RTSP streaming. Index 1. RTSP streaming transmitting type 2. Where to ad...

Port 554 was open so I tried a few URIs for Hisilicon. No go.

Complete Hisilicon IP Camera Setup Guide - ONVIF, RTSP and Tutorial Included
Discover the ultimate guide for setting up your Hisilicon IP cameras with our free software. Stream live video via RTSP, enable ONVIF support for universal compatibility, and utilize advanced DVR for robust motion detection. Login to manage your Hisilicon camera securely and effortlessly.
Telnet was also open so tried a few logins. No go.
Wireshark capture of the webpage stream does not help much either.
It uses a flash app?
Code:
GET /images/swfupload.swf?preventswfcaching=1571157185536 HTTP/1.1
Accept: */*
Accept-Language: en-NZ
Referer: http://192.168.1.191/view.html
x-flash-version: 32,0,0,255
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: 192.168.1.191
If-Modified-Since: Tue, 15 Oct 2019 16:33:45 GMT
Connection: Keep-Alive
Cookie: juanipcam_lang=en; login=admin%2C; sync_time=true; usr=admin; pwd=
Code:
GET /netsdk/image?r=0.012618570360721726 HTTP/1.1
Accept: application/json, text/javascript, */*; q=0.01
Authorization: Basic YWRtaW46
X-Requested-With: XMLHttpRequest
Referer: http://192.168.1.191/view.html
Accept-Language: en-US,en-NZ;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: 192.168.1.191
Connection: Keep-Alive
Cookie: juanipcam_lang=en; login=admin%2C; sync_time=true; usr=admin; pwd=
ONVIF Device Manager didn't get anything out of it either.
ODM
Download ODM for free. Device Manager for ONVIF-based Network video devices. ODM is a ONVIF protocol implementation of Network Video Client (NVC) to manage Network Video Transmitters (NVT), Network Video Storage (NVS) and Network Video Analytics (NVA) devices. Implements Discovery, Device...

The alternative is if we can pull a stream out of the HI3536D NVR. Even if it is in the quadview screen.
At lease processing will get us into the general timeframe of the icendient.
Any help appreciated

--------
First impressions.
The cameras felt the part, all plastic and light.
Not sure how long they will last in the sun.
For the price if they go 2 years I will be happy.
The picture was surprisingly good. Day and night.
It was truly plug and play.
With open door security

Camera settings were locked down. Only basic ones available. No manual shutter range so no good for night LPR application.
The downfall with any cheap NVR is playback.
Motion detection outside fails miserably with any vegetation nearby.
I wanted to run them into something a bit more smart.
My program of choice is Sighthound.
The amount of time I have spent working on this I could have bought a few Dahua cameras.
But I persevere on principal and a good learning exercise

Attachments
Last edited: