Poll

Has the hackabiliy of the E4 made you buy one :  

Yes, I was already looking at the competition at a similar price, but the hack swung it to E4
274 (27.9%)
Yes, I'd not considered buying a TIC before, but 320x240 resolution at this price justifies it (as either tool or toy!)
444 (45.3%)
Yes, I was going to buy an E5/6/8 class of unit but will now get the E4
49 (5%)
No, but am looking out for a cheap i3 to hack
50 (5.1%)
Not yet, but probably will if now that a closed-box hack becomes is possible
164 (16.7%)

Total Members Voted: 803

Author Topic: Flir E4 Thermal imaging camera teardown  (Read 3769492 times)

0 Members and 10 Guests are viewing this topic.

Offline stefbeer

  • Regular Contributor
  • *
  • Posts: 57
  • Country: de
Re: Flir E4 Thermal imaging camera teardown
« Reply #4225 on: March 10, 2014, 11:35:39 pm »
@Artemio: One possibility would be to disable or disconnect every network connection of your machine and only reconnect the camera. Then the camera should setup it's default IP address.
Another possibility is to do things step by step.
- Enable RNDIS via the hidden menu
- Connect the camera to the computer
- Look for the FLIR network interface
- Look at the details of the FLIR network interface, especially its default gateway. This is the address you have to connect to. I've never paid attention to the IP address of my computer but I think it's possible that it changes, but that doesen't matter. You only need the address of the default gateway. Maybe you could post a screenshot of the network interface details.
- Try to connect to the default gateway from one step earlier. I've never tried to ping the camera so I have no idea if it's even possible.

The fact that FLIRInstallNet shows the camera as "Local Area Connection 6" is a bit confusing. Also the IP range shown in your screenshot doesen't look right. 169.254.109.244 seems to be an automatic assigned address by the client because it didn't receive an IP address from the DHCP server. Maybe some security software blocking the communication?
And do you have FLIRInstallNet opened while you try to connect via FTP? I also never tried that, so I don't know if it works or not.
 

Offline uski

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: us
Re: Flir E4 Thermal imaging camera teardown
« Reply #4226 on: March 10, 2014, 11:37:36 pm »
Hi,

@Artemio: One possibility would be to disable or disconnect every network connection of your machine and only reconnect the camera. [...]

I suspect it will not work. On some computers there is no communication through the RNDIS link.
If you look at the packet count, received packet count stays at zero.
This means no DHCP replies and no IP setup.

I tried putting an IP address manually (192.168.0.1) and I couldn't ping the camera either.

Really, when that happens, try with another computer.

uski
 

Offline veetee

  • Newbie
  • Posts: 5
Re: Flir E4 Thermal imaging camera teardown
« Reply #4227 on: March 10, 2014, 11:53:10 pm »
@veetee

Here is your modified config file.

Please replace "FlashFS\system\appcore.d\config.d\conf.cfc" with
the new one, cold-boot and report about the result. Thanks.

Looks good, I don't have all the menu's Rainer does but all I did was swap config.  Will get some pics up soon for verification. :-+
 

Offline Artemio

  • Contributor
  • Posts: 10
Re: Flir E4 Thermal imaging camera teardown
« Reply #4228 on: March 11, 2014, 12:13:45 am »
@stefbeer

- Disabled Windows firewall completely
- Disabled all network adapters, I only had one
- Removed the Flir device drivers
- rebooted
- reinstalled device drivers
- Enabled RNDIS from hidden menu
- rebooted FLIR
- connected camera to computer
- Got the following (attachment)
- FLIRInstallNet gave the same results, detected a device in 169.254.221.255 but Get Versions times out.

I've tried having the FLIRInstallNet opened and closed, but since I can't even get the gateway I guess it doesn't matter.


I will be moving to a different machine as @uski suggests, aside form the different one I already tried before.

What a *great* moment for this to happen =(

thanks for the help
 

Offline Rainer

  • Regular Contributor
  • *
  • Posts: 54
  • Country: de
Re: Flir E4 Thermal imaging camera teardown
« Reply #4229 on: March 11, 2014, 12:15:22 am »
You have to install the Beta3 from Taucher to get the full functionallity
 

Offline veetee

  • Newbie
  • Posts: 5
Re: Flir E4 Thermal imaging camera teardown
« Reply #4230 on: March 11, 2014, 12:20:14 am »
@Rainer - looking into Beta3

Here are current thermal only, non-MSX pics

security


tv box
 

Offline echen1024

  • Super Contributor
  • ***
  • Posts: 1660
  • Country: us
  • 15 yo Future EE
Re: Flir E4 Thermal imaging camera teardown
« Reply #4231 on: March 11, 2014, 12:32:08 am »
If you can't get 192.168.0.2 to work, turn IPv6 off in the adapter settings for INFRARED.
I'm not saying we should kill all stupid people. I'm just saying that we should remove all product safety labels and let natural selection do its work.

https://www.youtube.com/user/echen1024
 

Offline Artemio

  • Contributor
  • Posts: 10
Re: Flir E4 Thermal imaging camera teardown
« Reply #4232 on: March 11, 2014, 12:46:26 am »
No luck, disabled ipv6, tested in 4 machines. I got the same in all of them.

I came back to the main machine to try the ipv6 thing, and I it finally gave me the 192.168.0.2 gateway via DHCP... however nothing is working networking wise. I still can't connect via ftp, I cannot connect via FLIRInstallNet , it always times out.

It seems I am out of luck here... what could have gone wrong? I only used the fif files for RNDIS...

What can I do now?

PS. I can ping 192.168.0.2
 

Offline echen1024

  • Super Contributor
  • ***
  • Posts: 1660
  • Country: us
  • 15 yo Future EE
Re: Flir E4 Thermal imaging camera teardown
« Reply #4233 on: March 11, 2014, 12:47:28 am »
No luck, disabled ipv6, tested in 4 machines. I got the same in all of them.

I came back to the main machine to try the ipv6 thing, and I it finally gave me the 192.168.0.2 gateway via DHCP... however nothing is working networking wise. I still can't connect via ftp, I cannot connect via FLIRInstallNet , it always times out.

It seems I am out of luck here... what could have gone wrong? I only used the fif files for RNDIS...

What can I do now?
Check the subnet.
I'm not saying we should kill all stupid people. I'm just saying that we should remove all product safety labels and let natural selection do its work.

https://www.youtube.com/user/echen1024
 

Offline RAWebb

  • Contributor
  • Posts: 25
  • Country: us
Re: Flir E4 Thermal imaging camera teardown
« Reply #4234 on: March 11, 2014, 12:49:14 am »
What a *great* moment for this to happen =(

Assuming that you have RNDIS enabled from the E4's hidden menu and the RNDIS drivers installed on the PC:

Disconnect the E4's USB cable and all network connections. Check that the network is really gone (e.g., ipconfig from a command prompt). Turn OFF the FLIR. Connect the USB cable between the E4 and the PC. Then, turn the E4 ON.

When I was having problems getting the RNDIS network to enumerate properly, I tried it as described and immediately got a good 192.168.0.1 IP from the camera and then was off and running with FileZilla. Give it a try.
 

Offline Artemio

  • Contributor
  • Posts: 10
Re: Flir E4 Thermal imaging camera teardown
« Reply #4235 on: March 11, 2014, 12:50:24 am »
@echen1024 It is 255.255.255.0

This is the log I get when pushing Get versions, since I need to run the fif for enabling ftp
Code: [Select]
2014-03-10 18:52:48,0153 005700 * Commander::GotoExitState sending EV_GOTO_NEXT
2014-03-10 18:52:48,0169 005700 * Commander::PostMessageA 3024 4 0
2014-03-10 18:52:48,0169 005700 * FIF::FIFInstallerEngine::PostMessageA 3024 4 0
2014-03-10 18:52:48,0169 005700 * Commander::OnCmdEvent (4,0)
2014-03-10 18:52:48,0169 005700 * Commander::OnCmdEvent calling OnNext()
2014-03-10 18:52:48,0185 005700 * FIF::FIFInstallerEngine::ExecuteNextInternal ->5
2014-03-10 18:52:48,0185 005700 * FIF::FIFInstallerEngine::StateExitState
2014-03-10 18:52:48,0185 005700 * Close TELNET link
2014-03-10 18:52:48,0185 005700 * FIF::FIFInstallerEngine::OnStateChange from 5 to 0
2014-03-10 18:53:11,0553 005700 * FIF::FIFInstallerEngine::OnStateChange from 0 to 1
2014-03-10 18:53:11,0553 005700 * FIF::FIFInstallerEngine::Execute posting  EV_GOTO_NEXT thread id: 5700
2014-03-10 18:53:11,0553 005700 * Commander::OnCmdEvent (4,5700)
2014-03-10 18:53:11,0569 005700 * Commander::OnCmdEvent calling OnNext()
2014-03-10 18:53:11,0569 005700 * FIF::FIFInstallerEngine::ExecuteNextInternal ->1
2014-03-10 18:53:11,0569 005700 * FIF::FIFInstallerEngine::StateReadyState ENTER
2014-03-10 18:53:11,0569 005700 * Connecting to: 192.168.0.2
2014-03-10 18:53:11,0585 005700 * FIF::FIFInstallerEngine::OnStateChange from 1 to 3
2014-03-10 18:53:11,0585 005700 * Commander::SetCommandState changing stat from 0 to 0
2014-03-10 18:53:11,0585 005700 * FIF::FIFInstallerEngine::StateReadyState waiting for connection.
2014-03-10 18:53:11,0585 005700 * FIF::FIFInstallerEngine::StateReadyState LEAVE
2014-03-10 18:53:12,0599 005700 * TELNET link established
2014-03-10 18:53:17,0669 005700 * Connection timeout
2014-03-10 18:53:19,0104 005700 * FIF::FIFInstallerEngine::OnStateChange from 3 to 5
2014-03-10 18:53:19,0104 005700 * Operation aborted

2014-03-10 18:53:19,0119 005700 * Commander::GotoExitState sending EV_GOTO_NEXT
2014-03-10 18:53:19,0119 005700 * Commander::PostMessageA 3024 4 0
2014-03-10 18:53:19,0119 005700 * FIF::FIFInstallerEngine::PostMessageA 3024 4 0
2014-03-10 18:53:19,0119 005700 * Commander::OnCmdEvent (4,0)
2014-03-10 18:53:19,0135 005700 * Commander::OnCmdEvent calling OnNext()
2014-03-10 18:53:19,0135 005700 * FIF::FIFInstallerEngine::ExecuteNextInternal ->5
2014-03-10 18:53:19,0135 005700 * FIF::FIFInstallerEngine::StateExitState
2014-03-10 18:53:19,0135 005700 * Close TELNET link
2014-03-10 18:53:19,0151 005700 * FIF::FIFInstallerEngine::OnStateChange from 5 to 0

@RAWebb Thanks for the feedback, I will hold to the one I just got while I can. Although I cannopt access it via any means but ping.
« Last Edit: March 11, 2014, 12:56:59 am by Artemio »
 

Online tom66

  • Super Contributor
  • ***
  • Posts: 6678
  • Country: gb
  • Electronics Hobbyist & FPGA/Embedded Systems EE
Re: Flir E4 Thermal imaging camera teardown
« Reply #4236 on: March 11, 2014, 01:24:17 am »
There is an E4 running 1.19.8 on eBay right now at £1,100. I wonder if it will go higher now 1.21.0 is apparently hackable.
http://www.ebay.co.uk/itm/The-NEW-FLIR-E4-Thermal-Imaging-Camera-1-19-8-firmware-/161242330991?pt=UK_CamerasPhoto_DigitalCameras_DigitalCameras_JN&hash=item258acab76f
 

Offline Artemio

  • Contributor
  • Posts: 10
Re: Flir E4 Thermal imaging camera teardown
« Reply #4237 on: March 11, 2014, 01:27:59 am »

Assuming that you have RNDIS enabled from the E4's hidden menu and the RNDIS drivers installed on the PC:

Disconnect the E4's USB cable and all network connections. Check that the network is really gone (e.g., ipconfig from a command prompt). Turn OFF the FLIR. Connect the USB cable between the E4 and the PC. Then, turn the E4 ON.

When I was having problems getting the RNDIS network to enumerate properly, I tried it as described and immediately got a good 192.168.0.1 IP from the camera and then was off and running with FileZilla. Give it a try.

No luck either, it gives me my IP address but not the gateway.

I ran a port scanner on 192.168.0.2, and all ports are closed. Any other options I have?
 

Offline cuda12

  • Regular Contributor
  • *
  • Posts: 65
  • Country: us
Re: Flir E4 Thermal imaging camera teardown
« Reply #4238 on: March 11, 2014, 01:29:47 am »
In Filezilla do not use a password or a username and try it.
 

Offline Nemonic

  • Contributor
  • Posts: 20
Re: Flir E4 Thermal imaging camera teardown
« Reply #4239 on: March 11, 2014, 01:34:14 am »
@Artemio

Can you run an

ipconfig /all

from the console so we can see if there is any adapter IP assignment conflict?

I suspect this is probably down to something like the order the virtual adapter driver is loaded or something more convoluted but maybe its something simple?

For anyone in the know, i have a question, are the current stock E4s loaded with the v1.21 firmwares?
 

Offline mamalala

  • Supporter
  • ****
  • Posts: 777
  • Country: de
Re: Flir E4 Thermal imaging camera teardown
« Reply #4240 on: March 11, 2014, 01:37:13 am »
There is an E4 running 1.19.8 on eBay right now at £1,100. I wonder if it will go higher now 1.21.0 is apparently hackable.
http://www.ebay.co.uk/itm/The-NEW-FLIR-E4-Thermal-Imaging-Camera-1-19-8-firmware-/161242330991?pt=UK_CamerasPhoto_DigitalCameras_DigitalCameras_JN&hash=item258acab76f

The problem is on several fronts. One is that, for now, .21 is only "apparently" hackable. .22 is out already. Next is that there is a _huge_ amount of bozos out there on eBay, who will pay ridiculous money for stuff. Last but not least, there are those who like to have something better, for a low price, but are unable to do the hacks on their own (or fear to fail doing it and getting into trouble), and thus are willing to pay a premium.

There will always be leechers who benefit from the work of others, no way around it. Not that i think it is OK that folks sell hacked stuff for a huge premium on eBay, but such is life.

Greetings,

Chris
 

Offline Rainer

  • Regular Contributor
  • *
  • Posts: 54
  • Country: de
Re: Flir E4 Thermal imaging camera teardown
« Reply #4241 on: March 11, 2014, 01:39:10 am »
I had the same thing with the network at my start with the E4. Disable all Networks, cold start the TIC and use (while network driver is installed) another usb-port. Then the TIC will prompt and a few minutes later, the driver works.

on the clock-side of the Windows-Bar is a little sign from the network-driver.
 

Offline Navynuke

  • Contributor
  • Posts: 14
  • Country: us
Re: Flir E4 Thermal imaging camera teardown
« Reply #4242 on: March 11, 2014, 01:58:46 am »
So my new e4 with 1.21.0 is sitting here staring at me. i have gone back through a couple of times but am having difficulties following everything that was done to rainer's camera so that I can duplicate it on mine. I deserve the abuse but would it be possible (and I am likely not gonna be the only one to ask) for a step by step rundown even if it just says this is what we did that worked (go find it...) I appreciate all the efforts of everyone concerned in advance. I figure if this is done ds won't get about a million pm's with requests. And it could then be pinned to the original post.

Thanks,

I know enough to know I don't know enough...
« Last Edit: March 11, 2014, 02:15:32 am by Navynuke »
 

Offline Artemio

  • Contributor
  • Posts: 10
Re: Flir E4 Thermal imaging camera teardown
« Reply #4243 on: March 11, 2014, 01:59:36 am »
@Artemio

Can you run an

ipconfig /all

I did, only the FLIR was active =/

I had the same thing with the network at my start with the E4. Disable all Networks, cold start the TIC and use (while network driver is installed) another usb-port. Then the TIC will prompt and a few minutes later, the driver works.

on the clock-side of the Windows-Bar is a little sign from the network-driver.

Just tested this, and no luck either. i tried three machines that didn't have any FLIR software installed, from scratch. They give me the correct IP and gateway, but FLIRInstallNet  fails in teh exact same way. it times out, so I cannot run the file to enable FTP again. Thanks

In Filezilla do not use a password or a username and try it.

No good, the port is closed. Thanks

In the current state I believe something happened that caused the FLIR to not be able to start the services. Flir tools doens't see the camera either. MSD and web cam mode work fine. Is there a way to reflash the firmware not involving flir tools (it doesn't recognize the camera), or a reset other than the one in the menu?

Otherwise, it seems I will be stuck the way I am.
 

Offline cuda12

  • Regular Contributor
  • *
  • Posts: 65
  • Country: us
Re: Flir E4 Thermal imaging camera teardown
« Reply #4244 on: March 11, 2014, 02:04:55 am »
You said the port is closed does that mean you tried it or are just using portscan info? If you click on my name and then view my posts and answers that where given you may find the answer to your problem.  Whatever you try after each time pull the battery and reconnect the usb cable before you try something else or you will miss whatever it is.
 

Offline Rainer

  • Regular Contributor
  • *
  • Posts: 54
  • Country: de
Re: Flir E4 Thermal imaging camera teardown
« Reply #4245 on: March 11, 2014, 02:07:04 am »
Do you use the RNDIS-only setting or the combined MSD_UVC_RNDIS-Mode? The combined Mode don´t work well and can cause your problem. Best is to use the RNDIS-only-Mode and in the driver, you can set the TIC-Storage(the IFS-PArt) as a network-Drive.

In the TIC-Menue(Storage Settings) you can set the TIC back to Factory-Settings.
 

Offline Viss

  • Newbie
  • Posts: 4
Re: Flir E4 Thermal imaging camera teardown
« Reply #4246 on: March 11, 2014, 02:25:55 am »
I'm exited! I applied the beta3 hack (or at least part of it? I don't have the condensation stuff yet).
I'd like to apply this new patch - should I post something for ds to run scripts on, or can someone whip up a xda-forums style howto for those of us that wants that sweet sweet 320x240 goodness?
 

Offline Nemonic

  • Contributor
  • Posts: 20
Re: Flir E4 Thermal imaging camera teardown
« Reply #4247 on: March 11, 2014, 03:26:20 am »
ds is the only one with the new CRC formula and file format details, the files he has posted are custom to the cameras/users he made them for so wont work on anyone elses camera from what i understand.

I think ds is waiting for a few confirmations that the files he has created are working before releasing his code/tool.

I'd be happy to port the formula/tools to .NET UI application if that would be of any benefit and with ds's permission once the dust settles.

I'm currently holding off ordering my own E4 until the result of this new method are confirmed by a few people. Paying an extra £200+ for a 1.19 version E4 isn't that appealing if 1.21 can be unlocked also, but more people need to apply the patches ds creates and confirm before we know for certain.
« Last Edit: March 11, 2014, 03:29:10 am by Nemonic »
 

Offline Viss

  • Newbie
  • Posts: 4
Re: Flir E4 Thermal imaging camera teardown
« Reply #4248 on: March 11, 2014, 03:39:36 am »
Right - I'm aware of the logistics - it's why I asked whether ds prefers more people posting configs to try, or if he's ready to post his method.
I'm happy with either :)

here's my conf.cfc, in the event it's the former.
 

Offline pomonabill221

  • Frequent Contributor
  • **
  • Posts: 252
  • Country: us
Re: Flir E4 Thermal imaging camera teardown
« Reply #4249 on: March 11, 2014, 04:58:51 am »
@stefbeer No luck reconencting to my camera here =/ The IP address changes every time, so I guessed the network configuration was bad. I reinstalled drivers, no good. I also used a completely different machine and did eveything from scratch, and it is no good either. I am always getting a different IP address in the network adapter for the Flir device form the PC.

I attach a screenshot.

I did manage to get 192.168.0.2 once, and it responded to ping, however it did not connect via ftp of the FLIRInstallNet.exe even then, from this machine or from the one I just set up. Rebooted the camera and machines several times. Any ideas?

Thanks
One thing that might be affecting network connectivity.... make SURE NO other nic is active... I always had this problem, and the only way to connect the TIC is to unplug my network cable and turn off the wireless.
I know others have said to force a NIC metric on all the interfaces, but that didn't work for me.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf