Finding Camera Stream Paths
This page is for collecting methods and approaches for obtaining camera stream paths.
Overview
Typical methods of obtaining the cameras paths are
- Read User Manual for the camera
- Onvif probe
- Search online resources and forums
- Get access to the camera shell
- Sniff network packets with TCPDump or Wireshark
User Manual
Reputable name brand cameras will offer this information in the user manual or website. If you bought some unbranded chinese camera or one of the proprietary cameras sold in retail stores then you must move onto the other options.
Onvif
Starting with Zoneminder 1.30.4 there is an onvif probe option in the camera configuration. You can also use other Onvif probe programs.
Web Search Online
Ispyconnect has a large database of URLs available for cameras. The ZM wiki has some. You may also come across a telnet password, which can be used in a later step, if necessary.
Camera Shell
If you can get access to the files on the camera, either through telnet, or dumping the cameras flash with hardware, then you can look around for paths. Running strings on a camera binary may come up with something. Dumping the flash might be a last resort.
Wireshark
Watch the packets coming from the camera when accessing the video stream, and determine where the stream is located if possible. Some cameras require authentication, so if your camera is not Onvif compliant, or is proprietary, then things are more difficult.
