Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need to allow access to DVR in the WAN network to LAN computers

    Scheduled Pinned Locked Moved Firewalling
    68 Posts 4 Posters 18.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      Do you know how this client talks to the dvr?  All I see in the sniff that works is a query via port 99 that is just html with a bunch of info..  Lets get a sniff on the same layer 2 without any filtering on the capature.. And actually see start of transfer of video.

      In the sniffs we have seen.  There was a query from the client to port 99, and lots of stuff sent back via html.  In the client that doesn't work never see that syn to dvr IP on 99..  But yes I agree in the 2nd sniff there was 1 multicast thing put out by the dvr.  maybe there is something else being sent out from the client IP that we are missing?

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • J
        jetberrocal
        last edited by

        From the payload of the capture there is a line about the type of DVR.

        The attachment is for that DVR.

        In there it says it uses something called QCIF network transfer. I dont know what that is but maybe you know what is that.

        I look for it in Google but I did not see the relevance with networking.

        Hi3520_1.jpg
        Hi3520_1.jpg_thumb
        Hi3520_2.jpg
        Hi3520_2.jpg_thumb

        1 Reply Last reply Reply Quote 0
        • J
          jetberrocal
          last edited by

          I am having difficulties to do the new capture, the Owner has not being available. 
          I hope that by tomorrow I can get the capture. 
          Sorry for the delay.

          1 Reply Last reply Reply Quote 0
          • J
            jetberrocal
            last edited by

            Finally.

            Here is the link to the wireshark capture with no filter:

            https://drive.google.com/file/d/0B5nlqqyTt-Vtc0N5bGJISXB6MlE/view?usp=sharing

            This is a big file because the computer gets really slow when the app plays the streaming and to close the app the system takes much time.

            As soon the app closes I stopped the capture.

            1 Reply Last reply Reply Quote 0
            • J
              jetberrocal
              last edited by

              I did a capture within the pfsense network but this time I set the detail to full and unlimited lines instead of 100.
              And set to listen on WAN interface.

              packetcapture(2).pcap

              1 Reply Last reply Reply Quote 0
              • J
                jetberrocal
                last edited by

                Capture but on LAN interface with unlimited lines

                packetcapture(3).pcap

                1 Reply Last reply Reply Quote 0
                • J
                  jetberrocal
                  last edited by

                  @JKnott:

                  When you try with Wireshark on that computer, you probably want to use a capture filter to limit what you have to sort through.  When you start Wireshark, double click on the interface.  Then in the capture filter box enter host <ip address="" of="" the="" dvr="">, click on OK and then on Start.  You'll then see packets to or from the PVR.  Multicast addresses are within the range of 224.0.0.0 to 239.255.255.255.  Any multicast packets, from the PVR will have a destination address within that range and whatever it's IP address is for the source.</ip>

                  I look for the multicast address as 224.0.0.0 to 239.255.255.255 but did not found any, so I guess there are no multicast transmissions.  The problem seems to be other thing.
                  I really tried to saw in the captures a difference between a good connection and a bad connection but I could not.  I do not have enough knowledge for this.

                  1 Reply Last reply Reply Quote 0
                  • J
                    jetberrocal
                    last edited by

                    I think that the problem was fixed and did not realized it.  I was barking to the wrong tree.

                    On Windows 7 clients the iWatch application showed the stream successfully.  It seems, do not know why, the iWatch application app fails to run correctly on Windows Servers.  I was doing my tests on the Server.  I think the clients got fixed when I disable one of the WAN default Firewall rules (Block to private subnets).

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.