Wireshark For Video Surveillance Tutorial
Author: Brian Karas, Published on Aug 01, 2016
Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.
Most Recent Industry Reports
Testing Bandwidth vs. Frame Rate
on Jan 23, 2019
Selecting frame rate has a major impact on surveillance bandwidth and storage consumption. But with smart codecs now common and cameras more...
Camera Course January 2019
on Jan 23, 2019
This is the only independent surveillance camera course, based on in-depth product and technology testing.
Lots of manufacturer training exists...
Bosch Favorability Results 2019
on Jan 23, 2019
Bosch's favorability moderately strengthed, in new IPVM integrator statistics over their results from 2017, with 2019 results showing strong net...
Intersec 2019 Show Report
on Jan 23, 2019
The 2019 Intersec show, held annually in Dubai, is now complete. IPVM attended for 3 days, interviewing numerous Chinese and Western video...
2019 Camera Book Released
on Jan 22, 2019
This is the best, most comprehensive security camera training in the world, based on our unprecedented testing. Now, all IPVM PRO Members can get...
Milesight Company Profile
on Jan 22, 2019
Milesight Technology, a Chinese company building an International branded business, says they are slowly building their presence through a series...
Cable Trenching for Surveillance
on Jan 21, 2019
Trenching cable for surveillance is surprisingly complex. While using shovels, picks, and hoes is not advanced technology, the proper planning,...
Milestone Favorability Results 2019
on Jan 21, 2019
Milestone's favorability moderately strengthed, in new IPVM integrator statistics over their results from 2016.
While the industry has been...
The IP Camera Lock-In Trend: Meraki and Verkada
on Jan 18, 2019
Open systems and interoperability have become core features of video surveillance systems, as virtually all professional IP cameras integrate with...
NYPD Refutes False SCMP Hikvision Story
on Jan 18, 2019
The NYPD has refuted the SCMP Hikvision story, the Voice of America has reported.
On January 11, 2018, the SCMP alleged that the NYPD was using...
The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.
Comments (12)
Jon Swatzell
Great post Brian!
Create New Topic
Undisclosed Manufacturer #1
Brian
This great article only shows how much info is exposed on our network on regular bases. This info is greatly helpful to the integrator, and equally helpful for an intruder.
While a good integrator may protect the communication from the VMS to the cameras using https, the communication between the VMS and the client is completely exposed in the majority of cases. There are few exceptions to the rule - some VMS solutions that do provide encryption and that will not necessarily require setting of VPNs to protect the data
Mulli Diamant
Create New Topic
DILEEP LAL
Brian, Excellent Post...!!
Create New Topic
Undisclosed Manufacturer #2
Great and informative article.
Some people think HTTPS might be part the end all for security, but for most it's only the initial communications and authentication, I think a lot of product could well be using Onvif, and I bet you would find the RTSP video stream is not afaik encrypted. So a simple man in the middle just sniffing the video packets could well be on the way to an episode of CSI!
Even companies using own private protocol, are most likely going to use unencrypted video streams. For speed and that, all so important wave their stupid hand in front of the camera and see their update display on browser being 1,000ms faster than company XYZ
The reason most likely is lazy programmers and unskilled non-security experts.
Any manufacturer out there even know this, do they even understand this. Do they care?
At some point end-end encryption will be the normal, and you best be able to deliver this ability or loose out, only takes one company to start this being standard.
Just take a look at iMessage and also now WhatApp this is how you do it properly.
Video content delivery has been around for ages; DRM protection is open source, maybe if Onvif committee needs to look at how quickly the world changes.
One thing I found that you should get an intelligent switch to using Wireshark, so you can setup the unit to allow monitoring on a particular port that is so you can grab all the packets of data, between a stand alone NVR and IPC devices. NVR PC based units naturally installing Wireshark on them is much easier, as mentioned in the article.
Create New Topic
Undisclosed Manufacturer #2
I used a Netgear GS105E, not owning a time machine to go back and buy up all the hubs of yonder years! I be sure this is also now an old model in the world of IT, where one day means something obsolete or something even more useless.
How about an article with Wireshark and Wi-Fi exploits, see how vulnerable your home or business network is. All be it's a more complicated setup!
With Wi-Fi networks, we put our devices out there for everyone to sniff at.
Create New Topic
Patrick Hart
An IPVM Wireshark certification class based on IP Cameras would be nice to have...
Create New Topic