I'm trying to find the source URL for a video feed. When I view the image information, I'll see a URL such as: http://img7.insecam.com:8080/NNNNNN/0/nocache/ where NNNNNN is presumably some internal number assigned to the feed. Can anyone give me step by step instructions using Wireshark to find the original source URL that the feed is coming from? Thanks in advance. asked 15 Nov '14, 10:56  jr2468 |
One Answer:
see my answers for a similar questions:
Regards answered 17 Nov '14, 16:08  Kurt Knochner ♦ edited 17 Nov '14, 16:09 showing 5 of 9 show 4 more comments |
Kurt, Firstly, thank you for the help.
I found those 2 threads previously, but I run into trouble at the "filter for dns in wireshark and find the request that matches the IP address." step. When I filter for DNS, none of the IPs that come back match the destination IP associated with the largest number of bytes from the prior step.
did you clear the DNS cache on the client, before you started capturing?
I did and still no luck. If it’s not too much to ask, could you run through an example using this URL:
http://www.insecam.cc/cam/view/106106/
Again, appreciate the help.
There is no video feed. It's a javascript repload a certain link (you posted that already in your question) to get a refreshed image of the camera!
Maybe I'm misunderstanding your request. What is it your are actually asking for? The link? Well, then you already have it.
No, I'm looking for the original IP address of the video feed, In other words, where is that website getting the feed from.
As I mentioned, the is no video feed and the site the images get loaded is the one you mentioned in your question.
Again, thanks for the help.
IP Camera --> Website/java--> me
This website, like shodan, searches for open IP cameras. I was hoping that by examining the java reload using wireshark, I could determine the IP address of the camera that the website found in its search.
@jr2468
Your "answer" has been converted to a comment as that's how this site works. Please read the FAQ for more information.
That's not possible, because they load the images from their own servers. Unless they tell you where they got it from (IP address of the camera), there is no way for you to retrieve that information.