Hello! I have the exact same problem here with VTH5221D and VTO3211D.
I snifed the network using wireshark and here's what i found:
different rstp adress are used depending
if VTO is calling:
cam/realmonitor?channel=1&subtype=0&proto=Dahua3
or if VTH tries to monitor then...