Outdoor IP Camera Amovision AM-Q6320-WIFI

May 19, 2014


For roughly 70€, the AM-Q6320-WIFI is the cheapest Wireless and HD outdoor camera I could find, and yet, it does the job...





After 3 years in the cold, my old ES-IP611W started giving signs of giving-up-soon, reminding me that it was never meant to be an outdoor camera anyway.
At the time, it was a good compromise as I needed something compact and real outdoor bullet cameras had prohibitive dimensions for my set up.

Now there are some low-cost IPC bundling significant advantages over this old dome camera: IP66 rating (dust-tight and strong water jet-proof), HD 720P with H264 compression, IR-Cut, WDR (Wide Dymamic Range), Wifi-n and ONVIF compliance.


The AM-Q6320-WIFI comes with the bracket, the fixing screws, wall plugs, and Allen key for adjusting the position, a brief "starting guide" leaflet, and a mini-CDR that should not be overlooked: beside the usual camera finder utility, it contains important information in a mess of documents, like he ONVIF ports and RTSP urls.



The camera came with the firmware V2.0.6.10-M20-Build:20131116TAt time of writing, the latest version at time of writing is V2.1.8.22-M20-Build:20140425T.


Specs:
Image Sensor:1/4" Progressive Scan CMOS OV9712
Effective Pixels: 1280(H)x720(V)
Min. Illumination:Color: 0. 1Lux, B/W: 0.01Lux ; 0Lux(IR on)
Max. IR LEDs Length:Φ5 36pcs IR Led , IR Range 15m
Day/Night:Auto(ICR) / Color / B/W
White Balance:Auto
Gain Control:Auto/Manual
Focal Length:6mm 
Max Aperture:F1.6
Angle of View:39.8
Mount Type:MTV mount (Interchangeable Lens)
Compression:H.264 
Main Stream:HD 720P (1280*720) 25fps 
Sub Stream:VGA 640*360 25FPS 

Video streaming options:
Camera's own CMS:


The most straightforward way to watch the video from the camera is through its own CMS.
Under IE, the AX controls can be downloaded from the camera 
Under Chrome/Mozilla/..., VLC will be used if available.
The interface is basic and clear with a good repartition of the features. 

As for many IPC in that range, the Audio and PTZ options are present even though not available on this model.

RTSP stream:
Tracing the network stream is a quick way to reveal the right rtsp syntax to use. But some documents under the "Third-party compatible" folder in the Mini-CD also contain that information.
With RTSP compatible viewers, such as VLC, there are 3 modes possible:

rtsp://<ip address>:554/11 -> 720P resolution or "MainFlow"
rtsp://<ip address>:554/12 -> VGA or "MinorFlow"
rtsp://<ip address>:554/13 -> the lowest "mobile phone" QVGA resolution


ONVIF:
Unlike many IPC using port 80 for Onvif, the default port is 1018.






This information is missing from the printed leaflet and you need to look at the "Third-party compatible" folder  on the mini-CD.  The ONVIF port is fixed in the early version of the firmware, but eventually can be changed in the LAN settings with the April 2014 firmware (that can be downloaded below).













SDK
Since it is based on the widespread HiSilicon Hi3510, the technical documentation can be found in Foscam and Dericam web sites and forums, like this precious SDK!

It contains all the commands that can be used to set/get configuration data and control the camera.

An example of its use is given later on.

There is also a telnet service but the login is kept secret by the manufacturer so far. 
However, visiting some .js scripts in the page sources reveals some file locations like:

http://<ip address>/tmpfs/accesslog.txt or /tmpfs/syslog.txt


Upgrading the firmware:
I received the latest firmware from Amovision.
That firmware image is valid for several models but the upgrade routine makes the distinction between single-board and double-board models and by default rejects the file.











The trick is to log in using this particular URL:
http://<ip address>/web/index.html?&-nochkupg
...and then load the following file from the Update section:
UPG_ipc3309a-w7-M20-hi3518-20140426_152644.ov (*)

When the IPC is done with updating, submitting the following URL:
http://<ip address>/cgi-bin/hi3510/param.cgi?cmd=getserverinfo

...should returns the following software version:
var softVersion="V2.1.8.22-M20-Build:20140425T"

(*) The firmware provided here has been tested only with the AM-Q6320. While I suspect it will work on other similar models such as Sinocam IPC-7004AIPCC-B10Vanxse V-B811/Sinocam IPC-6409 , I do not recommend to try it before a confirmation from the manufacturer.


In conclusion, this is a honest device for the price. It is easy to install and of compact dimensions.
Only grief I have is about the short power cord: once plugged to the camera cable, it gives no more than 1.6 meters in length, which is a bit short for going through the outside wall to the nearest power socket.



Special thanks to the reseller Smart918 on Amazon.co.uk marketplace who quickly replied to my technical queries and also to Amovision technical support for their reactivity in providing me so quickly with the latest firmware and a solution to apply it.







98 comments:

  1. Hi

    After reading your review decided to go for this one - so far is not bad cam for the price.
    Just two things:
    Did you try to replace lens with something wider?
    And have you had any problems with loging into web panel?
    My browser is taking me to main page but don't display any login fields.
    (I can login on my mobile and came works ok under Synology SS)

    thanks
    R

    ReplyDelete
    Replies
    1. Hi,
      I tried to replace the lens with a kit I used in the past and, while the 3.6, 2.8 and 2.1mm all seem to fit, they need to be screwed much deeper and end up against the sensor before you even get a proper focus. So in short, it doesn't work.
      For the login page, this is probably because the Auto Login option selected, if you click the Logout link on top right corner, it will bring you to the login page and you should see what I mean.

      Cheers

      Delete
    2. Hi

      I've emailed Smart918 and apparently they can supply cam fitted with 2.8 3.6 or 6mm lens - you just need to specify this on order.
      Unfortunately mine is already fitted so cant return.

      Re login page - I have basically blank dark grey page with with nothing on it so no way to logoff. - must be something with my PC as I've tried on many other profiles and still same.

      Thanks

      Delete
  2. Is anyone able to tell me what voltage and connector the DC power supply is? I want to replace an existing camera however the wiring is embedded in the wall so where possible I wish to use the same connectors?

    Steve

    ReplyDelete
    Replies
    1. It's a 12V 1A with a 5.5x2.1mm female plug like this one.

      Delete
    2. Thanks for the prompt response.


      Steve

      Delete
  3. I have now received and are having a few challanges setting up. after trying Safari and chrom on a MAC and then Chrome and IE 64 bit on a PC neither of which would display a video stream despite downloading and running the IP Camera set-up. i finally managed to get a picture on IE 32bit. I then tried BlueIris and still couldn't attach because it seemed to demand a different ONVIF port 8999 rather than 1018. Having updated teh firmware I can now chnage the ONVIF port to 8999 andstill get an error 400 Bad Request - no signal. i am running teh inspect ONVIF tool which shows;

    HTTP request...
    OK
    ONVIF GetCapabilities...
    No response
    Opening port 8999...
    ONVIF GetCapabilities...
    No response
    Checking for common cameras...
    Foscam FI86xx/98xx compatible?
    Foscam FI89xx compatible?
    Foscam FI9821 V2 compatible?
    Foscam FI9821 media port compatible?
    RTSP port open?
    RTSP port detected!
    Done

    any ideas?

    Steve

    ReplyDelete
    Replies
    1. Hi have it working fine with fw V2.1.8.22-M20-Build:20140425T on Chome 35.0.1916.114 m running on Windows 8.1 x64
      Chrome needs to have the VLC plugin installed, which you can check in chrome://plugins/
      in IE 11 (x64), the "VVVIPCamera" appears under "Manage add-ons" and you might need to approve it for running on any website.

      You should try the ONVIF Device Manager and see if you can get a connection through any of the onvif ports (I still use the default 1018). If that works, then the problem resides with BlueIris. In my case the camera works fine also under Synology Surveillance Station using Onvif.

      good luck

      Delete
  4. Bubbah, thanks for your help.

    I now have some progress as follows;

    I have it now working on BlueIris and have also got it working on ONVIF manager, thanks.

    I have also found it why I can't get it to operate on the MAC (Safari or chrome) which is because the VLC plug-in only works on 10.6 or below and i am running version 10.9. So at the moment it looks like using ONVIF on a MAC is a bit of an issue - I will continue to investigate.

    On Windows I got chrome to work by downloading the latest version and then had to check the plug-in as always on and then it worked fine - so thanks for the help here. Windows 64 still seems to be an issue but windows 32 is working fine. On neither of these can I find the VVVIPCamera under manage add-ons but on IE 32 it asks me if I want to run it when I start after downloading the product from the sign-on stage and it works fine. I will continue to investigate further.

    Steve



    ReplyDelete
  5. Hi there - I've just bought this camera and whilst it's working great wired, I'm having trouble getting it setup on wireless so I can mount at the back of the garden. How do I assign an IP to the wifi interface or actually save the connection? (updated to latest version)

    ReplyDelete
    Replies
    1. Got it going over wifi - it shares the same IP as long as connected. Just need to try and improve performance now.

      Delete
    2. Paul, have you managed to improve the performance at all and if so any tips?

      Steve

      Delete
  6. Out of curiosity, how did you contact Amovision for firmware update?
    I contacted sales (as all other email links on their site don't work), but they're clueless...

    I'm looking for the latest firmware for AM-Q610-WIFI and AM-643R-WIFI...

    Thanks a lot!

    ReplyDelete
    Replies
    1. I actually just picked up the first name after the sales manager from http://www.amovision.com/About%20us/Contact_Us/, which is jessica@amovision.com

      However I already asked for the AM-Q610-WIFI and they replied that I already had the latest (V3.79.00.1-X10-Build:20140310R) and last one as it was discontinued (already!).
      I actually just finished a short review of this model.

      Delete
  7. First - thanks for an interesting site. Many topics overlap my areas of interest.
    Trying to keep this short - last year from the massive range of cheap Chinese products I bought an IPCC-B10 IP camera to experiment with on my QNAP NAS Surveillance Station Pro. Good specs, cheap prices, refreshingly different from the usual bullet style.
    The ONVIF support worked OK for continuous recording, but lacked (as many ONVIF implementations seem to) any Event Subscriptions to activate motion detection recording. Updated firmware from IP Cloud Camera (ipccam.com) only yielded small bug fixes and cosmetic changes.
    After reading this site I flashed the camera with the Amovision firmware you've linked in your Gdrive. The camera still worked OK after that - but no extra functionality, just improved ONVIF responses.
    It will be a shame if the firmware development is now on the shelf. I wonder who the original developer is? All I need to activate motion detection recording on the QNAP is the ability to define an FTP destination folder, or an HTTP action, not a big change really. I wonder who the original developer is for these cameras?
    Then I bought a Dericam H502W, which I knew would have FTP folder and HTTP action. But that's another story - or post.

    ReplyDelete
  8. Hi again AlastairS. Following our previous conversation on amazon, I received in the meantime the 2 indoor cameras from dx.com (which took forever as usual from them) and reviewed them here.
    The Amovision indoor IPC proved to have the most complete ONVIF implementation with the Synology surveillance station, being the only model I've got supporting audio in that context. However lack of event subscription is not an issue with Synology as it can do its own motion detection where it seems to be only up to the IPC with QNAP.
    Would be nice to have the best of both world Amovision C610+Dericam (with the most reactive developer as Maygion.com). Maybe in the successor of H502W which has yet to be announced.
    Cheers!

    ReplyDelete
  9. I just got the AM-Q6320-WIFI and I am a bit annoyed I cannot get onto an mjpeg stream via HTTP. Only RTSP streams.

    Also I tried Amovision for latest firmware bu there is no response.

    I have firmware V2.0.6.16-M20-Build:20140219T

    ReplyDelete
    Replies
    1. I don't think this model has any url for http streaming implemented. This seems to be confirmed by info found on ZoneMinder and iSpyConnect web sites

      Delete
  10. Does anyone know how to do a cold start? I need to restore from factory defaults as i decided to change my admin password and even though i made a note of the new one before entering it, now left in the situation where this one or the default do not work ! Thanks for any help

    ReplyDelete
    Replies
    1. Good question, that's right, there's no reset button even inside the camera. But I may have found your solution from this other forum. So it seems you would need to contact Amovision so they can send you a special software to reset the device.
      If you get that software, would you mind coming back here and share it please?

      Thanks!
      Bubbah

      Delete
    2. Slightly optimistic because the ONVIF implementation may not support it - but the 'Maintenance' section of ONVIF Device Manager might be able to reset to defaults.

      By the way - I had a dialogue with Amovision a week ago where they said there would be updated firmware middle to end of August. It would be good to have some new features for what is a pretty good camera.

      And slightly related (because I'd flashed my IPCC-B10 with the current Amovision firmware) I got new firmware from IPCC that implements the ability to specify FTP folder destination on motion detection.
      So the B10 now does motion detection recording on my QNAP NAS, under ONVIF ProfileS.
      Hurray!

      Delete
    3. Thanks for the replies, have tried using ONVIF Dev Man v2.2.250 however the maintenance option does not respond with anything from the device.
      The Amovision website is down - ie translating the Chinese front banner comes up with "site closure".
      Tried access via port 23 is open and have the userid prompt etc, but all manner of tricks/password combinations do not work

      Ran a scan on all open ports and can see together with 23, port 88 is also open. Connected to this and was presented with a "ROOT>" prompt. Tried userid admin, passwd admin and it lets you login (but anything for userid and passwd seems to work :). There are lots of commands but so far cannot see anything like "reset back to factory defaults" There is also an "enable" command, asks you for another password, this must be the one that matters and the one I think it should be that does not work - nor does admin

      Sent email off to a contact at ipccam.com (email address is off website)

      Will keep this forum updated

      Delete
    4. Ok - had a mess with the preset and reboot commands within that "ROOT>" access via port 88 and bingo, seemed to have reset it back to default factory settings as I can now access using admin/admin and all my other stuff/parameters etc seemed to have gone back to default. However, still on port 23, admin/admin does not work, weird, but I don't know if this was working before I had all these issues !

      Delete
  11. Wondered if anyone could forward me the latest firmware - mine has the original and I cannot find the version referred to above - ie V2.1.8.22-M20-Build:20140425T. Thanks in advance

    ReplyDelete
  12. The link in the main article to the Google Docs file location still seems OK:
    https://drive.google.com/file/d/0B9kFXSWngqLWdk12NmpmU3hqclE/edit?usp=sharing

    I think the regular telnet access has an unknown, private password just for the tech support people.

    As you are now back to the defaults anyway - it might be interesting to see if this works without authorisation:
    http:///web/initializemain.html#

    ReplyDelete
  13. Hello,

    give it a try with root / cat1029

    Regards
    Chris

    ReplyDelete
  14. Any guesses as to whether the updated firmware linked in the article would suit a AM-Q645R? It is not a wifi model. hi3510/param.cgi?cmd=getserverinfo reports:

    var model="RT_IPC";
    var hardVersion="3300-ov9712";
    var softVersion="V2.0.6.16-M20-Build:20131219T"

    I've tried contacting support@amovision.com for an official firmware update, with no luck

    Thanks for any insight :-)

    ReplyDelete
    Replies
    1. not sure, it could be using a different memory size, so I wouldn't take a chance with it. I know that Alastair, who's visiting this place regularly has a AM-Q645R, so he may know.

      Delete
    2. Yes, I too have the AMOV-Q645R, same FW version. A really good little camera.
      A month ago I had a Skype IM conversation with tech support at Amovision - he said that new firmware was in progress and would be about a month. So I'm going to call him this week.
      Some weeks ago I updated an IPCC-B10 (IP Cloud Camera) with the article linked FW, worked OK.
      And out of the blue, got updated FW from IPCC themselves that usefully added an FTP destination folder that plays well with my QNAP NAS motion detection. I pondered using that on the Q645R but I'll wait till I hear from Amovision.
      I'll update this thread on what happens.

      Delete
    3. Thanks, both. While I'm impressed by the quality and value of the Q645R hardware, the behaviour of the software is unpredictable to say the least.

      Delete
    4. So, I had the Skype IM call with Amovision tech support. In contrast to what was stated a month ago, he said there was no new firmware for Q645R and Q6320. However - he did send the current firmware, which is identical to that linked for download in this article.
      I flashed the Q645R with it - and it still works OK. Some improvements in ONVIF responses, a fix for NTP time settings, no great changes.
      A small dilemma now - The Amovision firmware worked OK on my IPCC-B10, which now has newer and better firmware from IPCC. Will the IPCC firmware therefore work on the Amovision cameras? I'll probably try it. But not quite yet. BTW - Chris's telnet credentials still work.SO tempted to go exploring ...

      Delete
  15. Hi Alistair, that's useful. I'll flash the linked firmware. I've had a poke about on the filesystem using the above credentials, and at first glance there doesn't seem much that can be tweaked easily as all services are provided by a binary blob /bin/vs/vs_server.

    ReplyDelete
    Replies
    1. Hmm. Not a great outcome on my Q645R with the linked / recommended firmware. Under IR illumination the image is massively noisier that it was, constantly triggering motion detection, even at its least sensitive setting. This persists unless contrast it turned way down (<25%) to the point where little can be seen.

      Alastair, I don't suppose you managed to dump a copy of the original (V2.0.6.16-M20-Build:20131219T) Q645R firmware on your adventures, by any chance? Cheers.

      Delete
  16. Well that's not good. Sorry, I didn't extract any firmware from the as-supplied Q645R, I'm not sure how to.
    I wonder if a configuration value has changed? Apologies if it's a dumb question, have you tried changing the WDR setting under Media | Image?
    I've not found low-light performance to be bad, even just with the limited on-board IR. Maybe an IR illuminator could be an option - I have a small one (not in use), it's like a floodlight.
    I've uploaded a couple of sample videos for comparison, here: https://drive.google.com/folderview?id=0ByOOL4RskWFLZ3Y1N3N0d0pOeWc&usp=sharing
    Also - but at your own risk, as I haven't yet tried this, are an old and a quite new IPCC-B10 firmware that may well work OK on the Amovision camera. I did flash the IPCC camera OK with the Amovsion firmware, but not yet the other way round.

    ReplyDelete
  17. Hi Alastair Thanks for this! The twinkling compression artifacts on the LH (dark) side of your night time vid match what I'm seeing now, but didn't before the firmware change. I suspect that is what is triggering the motion detection.

    I will confess I hadn't touched the WDR setting. It was set to low, I have now put it to High, and I'll see what happens tonight. I have a another hunch that for whatever reason the IR filter mechanism has stopped working, so it may turn out that this is the cause. Again, I'll test later.

    ReplyDelete
    Replies
    1. I don't know if these are read-only (I suspect not as some file dates are recent) or if this is derived from another source - but the folder
      /etc/ipcamera/hi_nvt_config
      has some video source / encoder config settings, in particular video_source.ini
      They may be associated with ONVIF dialogues, but unfortunately not settable via ONVIF Device Manager. I haven't experimented with them. Yet.

      Delete
    2. video_source.ini is editable and changes survive a reboot, although irCutFilterMode doesn't seem to do anything and isn't affected by the GUI, so may be a red herring.

      How did you manage to contact Amovision support? I've emailed support@amovision.com, jessica@amovision.com, and tried to Skype IM support.amovision with no joy. I'd like to try to get hold of the V2.0.6.16-M20-Build:20131219T firmware from them, otherwise the camera is headed binwards...

      Delete
    3. The helpful contact was:
      Peter(sales manager)
      Shenzhen Amovision technology company
      Website: www.amovision.com
      Tel: 0755-28576393
      Mobile: 86-13510525716
      E-mail:peter@amovision.com
      MSN:amovision0100@hotmail.com Skype:amovision90
      Factory Address:6/F,2nd building,Shengzi Industrial Park,,Jihua Road,Bu ji,Longgang District,Shenzhen city,China

      Delete
    4. The LH side of my night-time vid is dark enough that I've no criticism of the low-lux performance against spec. When I'm back from hols, I'm going to buy a camera with a high sensitivity sensor, Sony IMX122 or Aptina, just for fun. BTW, if you really do mean to discard the camera, it might be interesting to try the old and new IPCC firmwares in my link before you do.
      A bit of a long shot - I have a Vanxse B-811 which broadly has the same internals as Amovision - though quite different firmware - that was stuck in daytime mode so very noisy at night, after I took it apart. Turns out there is a 2-pin plug with one wire and a 3-pin socket that's unkeyed. I'd plugged it in the wrong way. IR was permanently on, camera was always in daytime mode. Just a thought.

      Delete
    5. Long story short, received a new firmware for the Q645R which largely resolves my noise / capture issues and includes (somewhat flakey) FTP path specification:

      https://drive.google.com/file/d/0Bx47JfCa9XtZX1RDaVlGcjNxZTg/edit?usp=sharing

      *Be warned*, after a factory reset this changed my camera's default static IP to 192.168.0.136, which caused a few moments of panic...

      Delete
    6. Hey,Eddie, thanks for sharing. I will check this out in a couple of weeks when back from hols - don't want to possibly upset a working environment before we go. It's a similar date - but not the same file - as the update I got from IP Cloud Camera for my IPCC-B10, where it had added the FTP folder capability.
      On the IPCC version, I found that you need to put a '/' in front of the folder name otherwise it does a CWD to a date combo. An explanation of the 'full strategy' tickbox was:
      "It means: when there is insufficient space on the FTP. automatically covered. must be have remove permissions for FTP server"

      Delete
    7. Well, I flashed my Q645R with the updated firmware from Eddie's link above - and it's all still working just fine. Unlike Eddie's experience, all settings were retained, including the IP address. The camera has improved ONVIF responses and has gained the facility to specify a destination folder for FTP action, which will enable motion detection recording on my QNAP NAS. No change to low-light performance, which for me hasn't been a problem.
      The firmware version and build date now match that of the IPCC B10 which I updated a little while back.

      Delete
  18. Hello there,

    i own a IPCC-B10N as you can see it here: http://www.focalprice.com/HA0337W/IPCC_B10N_720P_1.0Mega_Pixel_H.264_IR_Night_Vision_P2P_ONVIF_2.2_Mini.html

    The cam is pretty ok for the price as sold via eBay in Germany - at time of selling i could buy it for 48,00 EUR.

    The cam works ok for me, but for me it's not ok to get one snap after the other with a gap of 10 seconds between each snap. Nevertheless i could login using root / cat1029 i was unable to find any config file in the cam which eventually represents this config setting. Does anybody of you guys have an idea if i could easily change this setting?

    Regards
    Chris

    ReplyDelete
    Replies
    1. You've probably checked this out already - but this file seems to be the one that holds alarm actions configuration, and it has some interval= settings in it. Though I haven't tested if it affects what you're looking for.

      # ls -ial config_emng.ini
      16 -rwxr-xr-x 1 1006 1001 3864 Aug 22 21:19 config_emng.ini
      # pwd
      /etc/ipcamera
      #

      Delete
  19. That's right, i'd already had a look to this file, but the file syntax isn't clear to me for 100%.
    Unfortunately i could not find any information on the file or it's syntax or parameters on the internet.
    I'd change some parameters to values of my understanding, but they didn't lead me to the point....

    Does anybody of you know if there's more information available for this kind of cam? Stuff like another / newwer firmware or whatever?

    Regards
    Chris

    ReplyDelete
    Replies
    1. I was supplied with updated firmware quite recently for the IPCC-B10 I'm using, see the files at the link below. You should check your device info for the same hardware type before risking an update:

      "I've uploaded a couple of sample videos for comparison, here: https://drive.google.com/folderview?id=0ByOOL4RskWFLZ3Y1N3N0d0pOeWc&usp=sharing
      Also - but at your own risk, as I haven't yet tried this, are an old and a quite new IPCC-B10 firmware that may well work OK on the Amovision camera. I did flash the IPCC camera OK with the Amovsion firmware, but not yet the other way round"

      Delete
  20. I bought a 6320 wifi, wanted to connect it to synology nas, registration wend okay but it would not connect. So in the end I decided to flash the firmware from the article. I guess this bricked my cam. Can not find it anywhere. I setup a local network with an old router so I can change ip range quickly. I tried 192.168.0.x and 192.168.1.x and the original range I use in my house and at the moment of flashing it was configured at 10.0.0.x. I use a portscanner program to search for the cam but no luck. Thanks for the advice ;-)

    ReplyDelete
    Replies
    1. I had a similar buttock-clenching few minutes after flashing my Q645R. For me, the IP had changed to 192.168.0.136. I ascertained this by plugging my (linux) PC directly into the camera, running tcpdump, and powering on the camera. I was able to see it trying to find its default gateway. If you're running Windows, you should be able to use WinDump to do something similar. Let us know how you get on...

      Delete
    2. Thank you for replying. I did see you previous comment about the 192.168.0 range. This time I tried the WinDump program. Connected the cam directly to my laptop (Dont I need a crosscable for this?) And ran WinDump. I could not see any info about the cam. Not sure if I just misinterpreted but did not see an ip comming by that did made sense. Why are these cams having a static ip anyway? Dont the chinese now there is something like DHCP? Sure its not as secure, but for installation its preferable. I'm giving up, I would have been able to find the cam with the postscanner like I did before the flashing disaster.

      Delete
    3. No need for a crossover cable these days, modern ethernet adapters are auto-sensing. If the camera used DHCP, you'd never know where to look for it! If you'd like me to look at the WinDump output and try to make sense of it, either upload the pcap or dump it as text on pastebin...

      Delete
  21. I bricked my clone too, board says hi3815e_9712_v1_1, no output at all from network via wireshark pcap. There is a tx rx gnd on the pcb, anyone know if you can just access straight over usb?

    ReplyDelete
    Replies
    1. If that's truly an RS232 connection, you might be lucky and get access to a Linux tty during the (u)boot process. What you could do is uncertain - but would be interesting to try.
      Plenty of active RS232 to USB cables on Amazon and eBay, example manufacturer and data here http://www.ftdichip.com/Products/Cables/USBTTLSerial.htm They show as a COM port in Windows. 115kbaud 8N would be a settings starting point.
      I'd guess a 3.3v version would suit a camera processor.

      Delete
    2. from my past experience with a Foscam IP camera, the challenge consist to have the right firmware to inject through the Jtag interface. To recover my FI8908W, I had to use a different binary than the usual firmware files, which was provided by Foscam, and also the right memory addresses to transfer the file to. This article will give you an idea of the operation and what equipment can be used.
      My own AM-C610-WIFI bricked recently (following a power cut I guess), and only the telnet service is still running, but Amovision did not reply to my enquiry for any recovery solution.
      If you still got the HTTP running, this other solution may work.

      Delete
    3. yes, I have ordered rs232 usb interface and will try to connect to it, I guess I could try to just upload a firmware image to the device and see what happens. I will report back here with the outcome. thanks guys

      Delete
    4. I have the same problem with the board hi3815e_9712_v1_1. RS232 on board not responding.

      Delete
    5. I connected it up and got a connection but no output during boot?

      Delete
    6. Yes does not send any data. I try to read spi flash. But the problem is that I have a u-boot binary only for Hi3518A, Hi3518C and Hi3516. In this board is Hi3518E

      Delete
    7. found a couple of links that might help:

      http://acassis.wordpress.com/2014/05/25/boot-log-for-a-cheap-hi3518-chinese-ip-camera/

      http://reverseengineering.stackexchange.com/questions/6300/extracting-a-firmware-image-via-u-boot

      let me know if you find a solution.

      Delete
    8. I desolering SPI flash chip, and read the contents. Just find the original memory contents. I'm thinking that I buy another one the same camera and downloaded it from there. Sorry for my English.

      Delete
    9. if you get the image from a new one and it works, please detail the process for me, thanks.

      Delete
  22. This comment has been removed by the author.

    ReplyDelete
  23. i´ve updated my cam Firmware cause the ftp upload doenst work.
    now after upgrading, i cant even save my ftp Setting. it stucks on "testing, wait a Moment".

    maybe some helping suggetsions? :(

    ReplyDelete
  24. can anyone help me with the email setting&pir setting please also my camera not record

    ReplyDelete
  25. Hello, I found this site interesting for firmware IPCC-B10 and B12 camera and other compatible cameras. The firmware date of December 2014. This may be the original manufacturer was looking Alastair. right mouse button and google chrome to translate ^^ site.
    As always against the same problem with motion detection. 1 image every 10 seconds. I do not know how to change that.

    http://www.rakuten.ne.jp/gold/secupcs/service/831NH1-2.html

    ReplyDelete
    Replies
    1. Interesting. Certainly the screen shots of the camera settings look familiar. The text suggests this is for updated hardware, 3400 and 3500 - mine are older at 3300. And the text also suggests for hardware manufactured after 2014.09.26
      I'm impressed that you found this site, it's amazing what the internet can do for you!

      Delete
  26. Hi I want to buy this camera's price and specifications can email me?

    ReplyDelete
    Replies
    1. I don't sell anything on this web site, you can still find this model in some places:
      Tinydeal.com
      amazon.co.uk

      Delete
  27. Found the following page with firmwares for a couple of different camera PCBs:
    http://cambox.cc/en/
    I have a Suneyes SP-Q701W IP cam with hardware version: 3300-ov9712a
    (which seems to be the same as the IPCC-B10 and Amovision Q645R)
    Second item on the list of firmwares is for the 3300 hardware. Yesterday I downloaded, unpacked and installed that one on my IP cam. Upgrade went fine and all settings were kept.
    Haven't noticed any major functional changes but am hoping for some general stability improvements compared to the 20140625 firmware I had before.
    Anyway, now the "Device info" shows the following:

    Camera Name: IPCAM
    Serial Number: VVVIPC1311293309-aQiySN6gEOOnEup
    Hardware Version: 3300-ov9712a
    Software Ver: V2.3.3.3102-M20-XWA-B20150114A

    ReplyDelete
    Replies
    1. Nice finding Magnus. I've tested several Hi3518-based camera recently that could probably also use one of those firmware. thanks !

      Delete
    2. Yes, thank you for that, it is useful.
      I've updated an Amovision Q645R with the 33xx version - no apparent problems, no apparent differences. Though I can't check ONVIF as the camera is on a separate LAN segment on a Hikvision NVR. The Q645R has previously been stable.
      I'll leave it a few days and try it also on an IPCC B10.

      Delete
    3. My feeling is that the motion detection in this FW has improved compared to the 20140625 version. Now I actually get proper motion detection snapshots each time someone passes the camera which was not always the case before... Also haven't had to restart the camera yet with this FW (something I occasionally had to do due to lockups in the older FW)

      Delete
  28. Is the power supply also for outdoor use?

    ReplyDelete
  29. Just a quick note on the AMOV-Q645R, for which I linked a firmware above. There now exists at least one other hardware revision of this camera with *identical* external markings, but only 8MB of flash, rather than the original 16MB. (dmesg here: http://pastebin.com/WhumVm53).

    This means that the firmware I linked about won't work and you'll brick you camera.

    ReplyDelete
    Replies
    1. Good to know, thanks Eddie!

      Delete
    2. Well I'm glad mine worked OK. No problems since. And the only noticeable difference is there is a little more default contrast in the colour settings.
      I also updated an IPCC B10, still working OK also.
      I'm about to swap the Q645R for a Hikvision turret - DS-2CD3332-I. The Hik has one of the newer EXIR IR illuminators and better low-light performance, which is a better match to the mount location, even when the Q645R is supplemented by an IR illuminator.

      Delete

  30. Help !! kent someone to snapshot url for this cam?

    ReplyDelete
    Replies
    1. Apparently, there's no simple url to get the snapshot. The md.html page uses the command "/web/cgi-bin/hi3510/param.cgi?cmd=snap&" to retrieve the latest snapshot from /tmpfs/snap_tmpfs/ ()

      For instance if http:///web/cgi-bin/hi3510/param.cgi?cmd=snap&
      returns /tmpfs/snap_tmpfs/20150515/IMG001/IMG_chn0_TIMER_MNG_20150515091229_004.jpg
      ...the full path to the latest snapshot is:
      http:///tmpfs/snap_tmpfs/20150515/IMG001/IMG_chn0_TIMER_MNG_20150515091229_004.jpg

      Delete
    2. Thanks it's very usefull.

      Bruno IPCC-B11N-WA

      Delete
  31. Hi,

    Somebody have information about this one:

    Serial Number: VVVIPC1501305380HSDS
    Hardware Version: 5300-mt9p006
    Software Ver: V2.3.3.3111-S50-SMA-B20150130I

    BR

    ReplyDelete
    Replies
    1. This comment has been removed by the author.

      Delete
    2. var serialNum="VVVIPC1501305380HSDS"; var model="RT_IPC"; var hardVersion="5300-mt9p006"; var softVersion="V2.3.3.3111-S50-SMA-B20150130I"; var ipcname="Capis Home"; var startdate="2015-6-22 23:12:31"; var runtimes="1 day, 1:38"; var sdstatus="Ready"; var sdfreespace="9434488 "; var sdtotalspace="15541920 "; var builddate="Jan 30 2015 "; var productmodel="null"; var vendor="RTJ"; var swver=""; var hwver="";

      Delete
  32. Hello out there,

    i'm using an IPCC-B13n. It is configured that way that it saves images to a ftp location in case of motion detect.

    The cam has kind of a strange behaviour. It saves images to my ftp location like this:

    root@raspberrypi:/Kamera/Terasse# tree -d
    .
    ├── 20141118.._--
    │   ├── 20141118
    │   │   └── IMG001
    │   └── IMG001
    ├── 20141119
    │   └── IMG001
    ├── 20141119.._--
    │   ├── 20141119
    │   │   └── IMG001
    │   └── IMG001
    ├── 20141120
    │   └── IMG001
    ├── 20141120.._--
    │   ├── 20141120
    │   │   └── IMG001
    │   └── IMG001
    ├── 20141121
    │   └── IMG001
    ├── 20141121.._--
    │   ├── 20141121
    │   │   └── IMG001
    │   └── IMG001
    ├── Kamera
    │   └── Terasse
    │   ├── 20141118
    │   │   └── IMG001
    │   ├── 20141119
    │   │   └── IMG001
    │   ├── 20141120
    │   │   └── IMG001
    │   └── 20141121
    │   └── IMG001
    └── Kamera.._--
    ├── Kamera
    │   └── Terasse
    └── Terasse

    Since i have root access to this camera i thought i might be able to sort out which config file is responsible for this bullshit. But i was failing.... There are several config files containing thousands of options, but they are not documented in these config files.

    Is there anybody out there who knows which config-file i need to vereify? All of my config files go in /etc/ipcamera.

    Due to my annual leave i won't be back before August 3rd.......
    Thxs in advance

    Regards
    Chris

    ReplyDelete
  33. The root password to many of the Hi351x-based IP cameras is usually 'xmhdipc'.

    ReplyDelete
  34. I buy a 2015 camera versión in aliexpress. Telnet password still cat1029

    Número de serie: VVVIPC1501263880HSDS-FMnA1d6zr6l
    Hardware Version: 3500-ov9712a
    Software Ver: V3.3.4.2102-S50-SMC-B20150703E

    I not found that firmware.
    Default ip its 1.105


    ReplyDelete
  35. Hi everybody,

    Thanks a lot for all these informations.
    I've got 4 IPCC-B11N-WA
    This product isn't referenced in http://www.ipccam.com/ ??
    All seems correct except :
    on /web/index.html OSD , OSD options aren't changeable, Apply button has no effect.

    any idea ?

    Bruno

    ReplyDelete
    Replies
    1. Hi,

      The solution to cancel IPCAM and the timestamp on the image is to put enable=0 in /etc/ipcamera/config_osd.ini in region 0 and region 1, by telnet login=root password=cat1029
      vi editor : https://www.cs.colostate.edu/helpdocs/vi.html
      basic linux : http://wiki.linux-france.org/wiki/Les_commandes_fondamentales_de_Linux
      to activate telnet on windows 10 : dism /online /Enable-Feature /FeatureName:TelnetClient in cmd command in administrator mode

      Bruno

      please have a look on http://dev4c.fr/WebCam/Bargy.php
      and http://dev4c.fr/WebCam/Mole.php

      Delete
    2. So fucking genius!!!! I been searching the telnet password in all the forums and doesn't found it. Thanks so much!

      Delete
  36. Hello, I replaced my old IPCC B15n because there were some problems with email notification. I bought a new one with the following details
    Camera Name: IPCAM
    Serial Number:....
    Hardware Version: 3500-ov9712a
    Software Ver: V3.3.4.2310-S50-SMC-B20151010C

    gmail and yahoo smtp email is working fine... initially. For whatever reason no emails are being send out after 2-3 hours. Only a restart can solve the problem. Immediately after the restart emails are send. Does anyone have an idea on how to solve this? Thanks

    ReplyDelete
    Replies
    1. Please give me URL to Firmware file. I am on V3.3.3.3123-S50-SMC-B20150416B and not satisfied with 5 sec interval on move detection.
      Does anyone have an idea to change that interval?

      Regards (werbung@rue.net)

      Delete
    2. This comment has been removed by the author.

      Delete
  37. Have a look here for latest drivers / software for this camera http://www.ipccam.com/index.php/download.html

    ReplyDelete
  38. Hi there,
    I've got a 'Suneyes' branded 720p camera:
    Hardware Version: 3300-ov9712a
    Software Ver: V2.3.4.1301-S50-TSA-B20150617A
    Is there any command or setting that could be used to turn of the IR LEDs? Camera looks out a window and the night shot is completely ruined by the IR reflection.
    Thanks.

    ReplyDelete
    Replies
    1. Hi, you should check their SDK here: http://www.suneyesgroup.com/download-center.html
      If such command exist it should be documented in there.
      Cheers

      Delete
    2. Any HI3510 should use the same cgi command set, so have a look at the IR-LED section of this page instead:
      http://www.instar.com/faq_cgi_hd

      Delete
  39. Hi, I'd like to mention the DBPower C300E 720p camera, based on Hi3518. There now exist 2 very different software (and maybe hardware) versions under the same model id.
    a)
    Hardware Version: 3500-ov9712a
    Software Version: V3.5.4.2301-S50-SMC-B20150723B
    Telnet, port 23: cyt1029
    This is the type of firmware discussed this thread

    b)
    Hardware Version: (2016-03-18)
    Server Version: 4.0.30.74FE
    OCX: 2.16.2.24
    telnet port 99: root anni2013

    Model b features an additional WPS/Reset hardware button at the LAN plug.

    Model b requires an OCX file to be installed. This is a major disadvantage! The OCX file is only available for Windows. Without the OCX file installed you can not even log in to the web frontend. That means the webfrontend is unaccessible from GNU/Linux, Mac OSX, Android, IOS, etc.
    It seems like the devs have taken the whole configuration software part out of the cameras web ui (maybe to save flash disk space) and moved it to the proprietary OCX software. On clicking Settings in the web frondend a windows-like config window will pop up.

    Another drawback of model b is the cgi interface having been removed, at least my tests didn't work. Also model A's video looks more pleasing to the eye. Model B's video looks too sharp.

    Model A seems to be no longer available and according to vendor helpdesk you can "upgrade" from a to b, but not vice versa.

    Screenshot of both models' webfrontend, left=A, right=B: http://imgur.com/hwVDAKy

    ReplyDelete