WyzeCam and Pfsense

djskott

So, It reverted back after a day or so. I haven't had time to dig until now.

I'm seeing in the pcap the cams are talking to 167.160.89.154.

Example: 192.168.200.104.55902 > 167.160.89.154.10001: UDP, length 1117

Traceroute takes it to some server farm at dedicated.com

Tracing route to 167.160.89.154 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.0.1
2 10 ms 11 ms 5 ms 10.68.88.1
3 15 ms 16 ms 12 ms 100.127.74.82
4 28 ms 40 ms 13 ms 100.120.100.16
5 * * * Request timed out.
6 * * * Request timed out.
7 23 ms 24 ms 24 ms 64.124.129.53.IPYX-288174-006-ZYO.zip.zayo.com [64.124.129.53]
8 23 ms 23 ms 20 ms po2.lax-csla2-bb5.globalsecurelayer.com [206.148.25.94]
9 48 ms 51 ms 47 ms e50.sea-drtsea10-bb1.globalsecurelayer.com [206.148.25.7]
10 49 ms 55 ms 49 ms po10.sea-drtsea10-cr1.globalsecurelayer.com [206.148.25.16]
11 * * * Request timed out.
12 56 ms 53 ms 107 ms core.sea.dedicated.com [167.160.89.2]
13 46 ms 51 ms 51 ms 167.160.89.154

I don't ever see my phone external IP address appear in the PCAP.

So I did a PCAP from my phone targeting the Wyze app. It's saying the Source is 92.119.177.210
which is another serverfarm/cloud solution at M247.

Tracing route to 92.119.177.210 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.0.1
2 9 ms 11 ms 8 ms 10.68.88.1
3 10 ms 7 ms 14 ms 100.127.74.82
4 13 ms 16 ms 8 ms 100.120.100.16
5 13 ms 16 ms 11 ms phx-b6-link.ip.twelve99.net [62.115.173.20]
6 7 ms 9 ms 13 ms lumen-ic-358768.ip.twelve99-cust.net [62.115.176.123]
7 * 73 ms 71 ms ae1.3511.edge2.NewYork6.level3.net [4.69.209.78]
8 69 ms 68 ms 69 ms 4.8.5.142
9 * * * Request timed out.
10 94 ms 91 ms 85 ms vlan2918.as15.nyc1.us.m247.com [193.9.115.225]
11 * * * Request timed out.
12 66 ms 63 ms 69 ms 92.119.177.210

Here are the caps

Here is a video of my Traffic Feed in PFSENSE
The target ip for the cam I was viewing is x.200.104

Youtube Video

stephenw10

Hmm, this still 'feels' like it's falling back to sending all video via the remote servers at a much lower data rate. But if it was that I'd expect to see some indication it was like 'indirect' or 'proxied' etc.

johnpoz

@djskott still waiting to see what your actually sending out your wan, be it direct to the client device, or their servers.. Like I did above vs what your gauge says in your client..

When I gets a chance will look to see if can actually do a direct connection via a port forward..

djskott

@johnpoz

Here is a WAN Cap WAN Cap 9923.zip

Here is the video taken at that time of the WAN Cap

YouTube Video

johnpoz

@johnpoz not really what I was looking - can you not just look at your traffic graph? Or the package dartstat would also be useful..

What I am curious on does the gauge match up with the amount of data your actually sending out or not.

And says video is not stable - points to a internet connection or wireless problem if you ask me.. There is nothing in pfsense that would care where or what data your sending that would interfere with specific traffic like a video stream.. Unless your running an IPS.. And the traffic is inside a https or would be encrypted tunnel (or freaking should be) - so IPS really not going to do anything either.

And as mentioned before.. Really need a sniff on the lan side same time your doing a wan sniff, if you think pfsense is dropping traffic..

nullcure

@djskott I notice that Wyze website https://view.wyze.com/live

the captcha disappeared (I am not a robot checkbox) it seems they are doing work on their side.
that URL i mentioned keeps auto refreshing the page can you confirm is this happening for you? I'd like to rule out the possibility of a pFsense + issue ( i upgraded since it's free) since I setup a proxmox bare metal(Couldn't lay waste to 8 cores 16 threads etc) and am now running pFsense VM as the topmost headend on my network...

nullcure

@johnpoz @djskott The network not stable message is due to the android / iphone app not getting a consistent video feed I'm not sure what metric it monitors to hit whatever threshhold said metric is set too to display that message but I get it a lot.

In fact it is because of these damn cams and that net unstable message I ended up installing pfsense in the first place. I ended up first trying one of those new gen $280 ish wifi routers to see if it would fix the problem when it didn't i got my money back took the wifi router i've had for awhile now TP-LINK Archer AX21 put it into AP mode because I wasn't about to re-wire everything just so I could move the wifi router from the basement to the first floor where all 3 of my cameras are mounted under the eves on the corners of the roof of my house.

This GREATLY increased the wifi signal to the cameras I moved 2 cables installed pfsense and here I am now in this forumn and currently with proxmox now lol

All cause these cams.

WHEN they work they work great. Wyze has been putting in a lot of new firmware upgrades to greatly increase how well the cams works.

How I test the connection to the cams is like this.

go over to https://view.wyze.com/live
quickly hover the mouse in circles across all 3 embedded video players until the control bar pops up (This means the connection was successful) how quick those bars pop up will tell you how well the connection is to the wifi router.
starting all 3 live streams and seeing that the seconds on the date and time are almost exactly synced (minus some 200-400ms) tells me I have optimum connection.

djskott

@johnpoz

Here is a video of the WAN and VLAN traffic graphs at the same time as well as what my phone is doing at that time when not connected to the Wi-Fi.

YouTube Video Example

When I went to the Live Page, it tells me that I have to subscribe, I didn't see a free option available.

Just as a side note, When on Wi-Fi there are zero issues with streaming the cams, Zero Lag, Steady stream of video. So wouldn't that indicate no issues with the Wi-Fi Signal?

nullcure

@djskott no its free you just. login with the same creds as on your wyze app.

are you using Stand alone ip cameras or a central base station?

i use wyze pan cam v3
wyze cam v3
both models stand alone ip cameras

djskott

@nullcure that's what I used to login and get that notice.

I have v3 cams and floodlights with the v3 cam.

nullcure

@djskott Oh wow they changed it then.

I pay for the plus features as it's $19.99 for a whole year for camera. I think they are offering some new subscription for the cam plus stuff $9.99 a month for unlimited cams or something? Not sure.

I find the plus features useful, it's great to buy cheap cameras at a good price. In terms of advanced uses, they've utilized the cloud hardware as a service to provide performance where the cameras themselves don't have the horsepower to do so.

but thats a different issue.

Where you ever able to figure out your issues with your cameras?

I'm, having connection stablity problems again I need to have uninterupted views of my cam streams and i'm having a hard time just having all 3 working at the same time.

I believe it's the wifi signal here.

Tempting to disable band steering and wondering if it's best practices before finally coming down and placing more access points in my 1st floor only home. my home is quite small standard 3 bedroom 1 floor. is wifi signal really the issue here?

djskott

I upgraded to the pro sub and two v3 pan cams. A week or so later I stopped seeing major latency. It has its moments but over all I'm able to stream remotely now.

I'm not sure what the issue was but it appears to have "self resolved" (mostly).

nullcure

@djskott I ended up fixing my problems with a well place wifi extender. Now I'm, able to login into the web view and see the date and time overlay is in sync to the second on all 3 cams.

Also if you're an android user you can get google home beta app and they have a "webview" kinda thing going on where you can see all your cams grouped together and live like this.....

Oh my, well isn't this just peachy. Well the important part is even if I can't see the live stuff they do record 24/7 to sdcard

I wonder if I could use socat or local dns server to spoof the programmed RTSP address in the code so it don't have to go to wyze servers just to see if it would work lol.

stephenw10

@nullcure said in WyzeCam and Pfsense:

so it don't have to go to wyze servers just to see if it would work lol.

"the cloud"