Hi!
I found this great information resource during investigating the TOP-201 cameras. I just bought 2 for fun, and after some experiments I got them partially working. My goal is to be able to get these working without using a Windows computer, and especially not any ActiveX (who could *possibly* come up with the idea to use a solution requiring ActiveX??).
Some random notes, from testing the devices individually:
During setup they where connected to fully isolated networks (with no internet access at all, unless explicitly opened in my network firewall. My test laptop had access to port 80/tcp and 554/tcp towards the device). A Mac lapop was used, with Safari to test with.
The first unit responded to ICMP (ping) on 192.168.1.10, but did not respond on port 80.
The unit tried to lookup the domain secu100.net (54.72.86.70).
The unit repeatedly tried to send a UDP packet to port 7999 on a few different IPs, such as 112.124.0.188, 76.73.118.194 and 54.72.86.70.
The payload of the packet seems to be the device serial ID.
This was also sent to port 8000 on 54.72.86.70.
Allowing up port 7999 on these IPs did not do anything. Opening up port 8000 did however; the host replied, and the device in turn sent a larger UDP packet which also seemed to include the firmware version.
After this little remote handshake, it seems the device woke up, and the web interface can now be accessed. If I now block port 8000 and reboot the camera, it still seem to work. Thus, it seems this is a one-time thing?
The web interface shows something which looks look like a Login prompt. I say "looks like", since everything is in Chinese.
---
Now for the second unit, visually identical but some light scratches on the back (refurb?). This seems to be able to startup without every talking on port 8000 (it was re-blocked). Web UI accesible.
---
(Back to the first unit, but the second seems to behave the same way, at least the basics)
The device has a sticker with the text "User: SUPER, Password: " on it. This did not work in the web interface, but the username "admin" and blank password, as seen on other images & in this thread, did work.
After doing some investigative work, I managed to find the version info from the UI: Build Date:2014/10/23 16:54:2, System: V4.02.R12.0q0006510.10010.1407.
After identifying the "play" button, the quicktime video started to play, with approx 1.3 seconds of delay (filming a subsecond timer ticking on screen, looking at it with the video browser). On the right hand side I seem to have some pan/zoom/tilt controls which does nothing (surprise!).
Telnet access on port 9527 was possible without issues. I managed to change the time, and the IP using the following commands:
$ time -s 2015-08-05 23:23
$ netitf -ip 192.168.1.11 255.255.255.0 192.168.1.1
Then I reconnected to the new IP, and tried to save the config (yes, pure guessing here):
$ cfg -p
First Config File Path:/mnt/mtd/Config/Json
Second Config File Path:/mnt/mtd/Config/Json
Custom Config File Path:/mnt/custom/CustomConfig
$ cfg -g NetWork /mnt/mtd/Config/Json
NetWork: Write change to file /mnt/mtd/Config/Json/NetWork.custom OK!
$ reboot
After reboot, it came up on the old IP. It had apparently not changed.
Questions
So, as a new owner of these, I've got a few questions, which I hope someone here might be able to help me with, or give me some pointers on where to dig for further info
1. Does your device have a high-pitch buzzing noise coming from them? Both of my devices have a steady buzz at power up, after approx 30s the device has completed booting (I guess) and the steady buzz is changed to more of a...frenzy buzz...which seems to vary a bit, especially with load (i.e. starting video).
2. Any idea on how to save the network configuration from the telnet interface?
3. Any idea on how to change arbitrary config fields?
4. Any idea on how to change the camera name? 'cfg -d AVEnc 0' dumps a JSON struct where the key at VideoWidget.ChannelTitle.Name contains "CAM01", which is embedded in the video..
5. Or how to change the language?
The embedded video timestamp has 3 Chinese characters after the seconds marker. What does it say in english?
6. Any luck with the "shell" command ("Linux shell prompt!" in the help)? It gives me a blank prompt, and when pressing enter i only get ": not found"... Only way to exit is power-cycle camera.
Thanks!