海康相机IP搜索协议研究
2019獨角獸企業重金招聘Python工程師標準>>>
項目中使用了海康相機用于拍照功能,要訪問海康相機就需要知道相機的IP,一般我們通過配置文件將IP地址傳入程序中,在調用其官方SDK進行拍照。每次都需要手工配置IP地址,每次現場安裝實施都要配置,非常容易配置錯誤。所以如果軟件能夠自動搜索相機,并自動配置,免去手工配置的麻煩和易出錯,可以增強軟件的可靠性,降低部署復雜度。
分析之后想到,海康官方有提供一個相機IP修改的工具,功能強大,只要在局域網中,即使不在一個IP段也能搜索到相機。如果我們的程序也能夠實現該功能,能否實現前面的設想?
根據這個想法,我覺得可以分析下其IP搜索通信協議。
通過使用wireshark抓包工具,發現其IP搜索使用了兩種通信方式,一種是UDP廣播,另一種是更加底層的通信方式,直接通過網卡發送廣播包。實測時發現,兩種通信方式功能基本相同,都能夠所搜IP,修改配置。直接使用網卡發包的方式比UDP廣播的方式貌似兼容相機多些。
UDP廣播:
UDP廣播通信方式,搜索工具會向IP:239.255.255.250,端口號:37020進行廣播,通信內容為xml格式字符串,例如以下內容。各個字段含義已經比較清晰了。
/* 以下是海康相機UDP協議* 用于搜索相機和修改IP* 廣播地址:239.255.255.250* 端口號:37020*/搜索相機廣播請求 <?xml version="1.0" encoding="utf-8"?><Probe><Uuid>AB2CC373-2332-4F7B-AA18-838E08E748AE</Uuid><Types>inquiry</Types> </Probe>搜索相機返回結果 <?xml version="1.0" encoding="utf-8"?><ProbeMatch><Uuid>AB2CC373-2332-4F7B-AA18-838E08E748AE</Uuid> <Types>inquiry</Types> <DeviceType>140063</DeviceType> <DeviceDescription>DS-2CD5A26FWD-IZ</DeviceDescription> <DeviceSN>DS-2CD5A26FWD-IZ20160518AACH604074182</DeviceSN> <CommandPort>8000</CommandPort> <HttpPort>80</HttpPort> <MAC>bc-ad-28-53-85-e8</MAC> <IPv4Address>172.16.16.191</IPv4Address> <IPv4SubnetMask>255.255.255.0</IPv4SubnetMask> <IPv4Gateway>172.16.16.1</IPv4Gateway> <IPv6Address>::</IPv6Address> <IPv6Gateway>::</IPv6Gateway> <IPv6MaskLen>0</IPv6MaskLen> <DHCP>false</DHCP> <AnalogChannelNum>0</AnalogChannelNum> <DigitalChannelNum>1</DigitalChannelNum> <SoftwareVersion>V5.3.8build 151223</SoftwareVersion> <DSPVersion>V7.3 build 151218</DSPVersion> <BootTime>2016-08-01 17:04:52</BootTime> <ResetAbility>false</ResetAbility> <DiskNumber>0</DiskNumber> <Activated>true</Activated> <PasswordResetAbility>true</PasswordResetAbility> <PasswordResetModeSecond>true</PasswordResetModeSecond> </ProbeMatch>修改相機參數請求 <?xml version="1.0" encoding="utf-8"?><Probe><Uuid>21A9F613-5E4F-41DF-B821-E36523087D1D</Uuid><Types>update</Types><MAC>28-57-be-af-7a-14</MAC><Password>/RsWjdUa5zJ3OQWH6zy00w==</Password><IPv4Address>172.16.16.190</IPv4Address><CommandPort>8000</CommandPort><HttpPort>80</HttpPort><IPv4SubnetMask>255.255.255.0</IPv4SubnetMask><IPv4Gateway>172.16.16.190</IPv4Gateway><IPv6Address>::</IPv6Address><IPv6Gateway>::</IPv6Gateway><IPv6MaskLen>0</IPv6MaskLen><DHCP>false</DHCP> </Probe>修改相機參數成功 <?xml version="1.0" encoding="utf-8"?><ProbeMatch><Uuid>AB2CC373-2332-4F7B-AA18-838E08E748AE</Uuid> <Types>update</Types> <Result>success</Result> <DeviceType>140063</DeviceType> <DeviceDescription>DS-2CD5A26FWD-IZ</DeviceDescription> <DeviceSN>DS-2CD5A26FWD-IZ20160518AACH604074182</DeviceSN> <CommandPort>8000</CommandPort> <HttpPort>80</HttpPort> <MAC>bc-ad-28-53-85-e8</MAC> <IPv4Address>172.16.16.195</IPv4Address> <IPv4SubnetMask>255.255.255.0</IPv4SubnetMask> <IPv4Gateway>172.16.16.1</IPv4Gateway> <IPv6Address>::</IPv6Address> <IPv6Gateway>::</IPv6Gateway> <IPv6MaskLen>0</IPv6MaskLen> <DHCP>false</DHCP> <AnalogChannelNum>0</AnalogChannelNum> <DigitalChannelNum>1</DigitalChannelNum> <SoftwareVersion>V5.3.8build 151223</SoftwareVersion> <DSPVersion>V7.3 build 151218</DSPVersion> <BootTime>2016-08-01 17:04:52</BootTime> <ResetAbility>false</ResetAbility> <DiskNumber>0</DiskNumber> <Activated>true</Activated> <PasswordResetAbility>true</PasswordResetAbility> <PasswordResetModeSecond>true</PasswordResetModeSecond> </ProbeMatch>修改相機參數失敗 <?xml version="1.0" encoding="utf-8"?><ProbeMatch><Uuid>AB2CC373-2332-4F7B-AA18-838E08E748AE</Uuid> <Types>update</Types> <Result>failed</Result> </ProbeMatch>其中密碼部分進行了加密,加密方式為md5+base64,加密參考代碼如下
/*** md5加密* @param password* @return*/public static byte[] md5(String password) {try{// MD5MessageDigest md = MessageDigest.getInstance("MD5");md.update(password.getBytes());byte[] digestedValue = md.digest();return digestedValue;}catch(Exception e){e.printStackTrace();return null;}}/*** md5(base64)加密* @param password* @return*/public static String md5Base64(String password){try{// MD5byte[] digestedValue = md5(password);// base64BASE64Encoder encoder = new BASE64Encoder();return encoder.encode(digestedValue);}catch(Exception e){e.printStackTrace();return null;}}?
網卡廣播方式:
網卡廣播的方式,其協議內容使用二進制格式,并不像UDP方式那么容易理解。對于其協議格式只破解了一部分,其中貌似有校驗和的字段,其校驗和的計算方式無法得知,導致并不能實際用該協議對相機參數進行修改。要能夠使用網卡進行廣播通信,還需要安裝WinPcap(官方工具也裝了這個),java的話還需要jPCAP才能進行底層通信。以下是部分協議解析結果:
// mac通信設備搜索 //21 02 01 42 00 00 1D 2C 06 04 03 00 21 82 50 7B 9D 73 44 73 AC 10 10 F4 FF FF FF FF FF FF 00 00 00 00 00 00 00 00 FE 80 00 00 00 00 00 00 9D 57 F5 8D 3B B0 78 EC 00 00 00 00 00 00 00 00 00 00 00 00 // 貌似以下是mac地址通信接收的數據 //21 01 01 F6 00 00 1D 07 06 04 //04 (04=inquiry,07=update) //00 (結果:01=失敗,02=成功) //5B 44 //C0 56 E3 7C B0 C4 (物理地址地址) //AC 10 10 C1 (IP地址:172.16.16.193) //FF FF FF FF FF FF 00 00 00 00 //FF FF FE 00 (子網掩碼:255.255.254.0) //44 53 2D 32 43 44 32 34 31 32 46 2D 49 32 30 31 35 30 33 32 35 43 43 43 48 35 30 38 35 33 37 39 37 38 (設備序列號:DS-2CD2412F-I20150325CCCH508537978) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 98 11 00 00 //1F 40 (端口:8000) //00 00 00 01 00 00 00 00 //56 35 2E 31 2E 36 62 75 69 6C 64 20 31 34 30 36 31 32 (軟件版本:V5.1.6build 140612) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 //56 35 2E 30 2C 20 62 75 69 6C 64 20 31 34 30 34 31 31 (DSP版本:V5.0, build 140411) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 //32 30 31 36 2D 30 38 2D 30 32 20 31 38 3A 31 37 3A 33 31 (啟動時間:2016-08-02 18:17:31) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 9C 9D 99 //AC 10 10 01 (網關:172.16.16.1) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 //00 (DHCP:00=關,01=開) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 //50 (http端口:80) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 //44 53 2D 32 43 44 32 34 31 32 46 2D 49 (設備類型:DS-2CD2412F-I) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 // mac通信修改信息 //21 02 01 42 00 00 26 19 06 04 06 00 33 16 50 7b 9d 73 44 73 //ac 10 10 f4 (PC機IP(20)) //c0 56 e3 7c b0 c4 (mac地址(24)) //ac 10 11 87 (IP地址(30):172.16.17.135) //ff ff fe 00 (子網掩碼(34):255.255.254.0) //82 7c cb 0e ea 8a 70 6c 4c 34 a1 68 91 f8 4e 7b (md5加密(38)) //00 00 1f 40 00 00 00 00 00 00 00 00 02 9c 02 41 (1f 40兩個值可能是校驗和) //ac 10 10 01 (網關(70):172.16.16.1) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 (IPV6地址(74)) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 (IPV6網關(90)) //00 (IPV6子網前綴長度(104)) //00 //00 (DHCP(106)) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 //50 (http端口(137):80) //00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00?
轉載于:https://my.oschina.net/u/2450094/blog/791385
總結
以上是生活随笔為你收集整理的海康相机IP搜索协议研究的全部內容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: android studio 手动安装g
- 下一篇: BZOJ 1827: [Usaco201