利用Linux socket 模拟大华IPC发送广播包，让大华客户端搜索到一个模拟的ip摄像头

最近在熟悉IP摄像头的网络通讯，做了个简单的实例，现在整理一下思路。

大概就是拿到一个大华IP摄像头，wireshark抓包分析它是如何回应大华客户端发出的广播包，然后通过Linux创建UDP，模拟ip摄像头设备发出同样的广播包。然后在大华的视频客户端点击自动搜索的时候能搜索到一个虚拟的IP摄像头设备。但是这个设备是不存在的，只是个虚拟的。

首先我们需要通过抓包工具，查看当我们点击自动搜索时，我们的摄像头设备是如何回应客户端发送的广播包的。图中 192.168.1.36是我的设备。

图中蓝色部分的UDP协议就是当点击自动搜素时发送的广播包，我的设备回应的包就是长度为839的包，其中真正的数据长度为797。

查看原始数据如图。

分析数据包的工作做完后，就可以开始模拟了。我所使用的方法时在linux下创建UDP发送相同的包，让大华客户端识别。下面是UDP的代码

#include<stdlib.h>
#include<stdio.h>
#include<string.h>
#include<sys/types.h>
#include<netinet/in.h>
#include<netdb.h>
#include<sys/socket.h>
#include<sys/wait.h>
#include<arpa/inet.h>

#define BUFFER_SIZE 794

int main(){
int sockListen;
int recvbytes;
char recvbuf[128];
char buffer[BUFFER_SIZE] = {0x20, 0x00, 0x00, 0x00, 0x44, 0x48, 0x49, 0x50,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0xfd, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0xfd, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x7b, 0x20, 0x22, 0x6d, 0x61, 0x63, 0x22, 0x20,
0x3a, 0x20, 0x22, 0x34, 0x63, 0x3a, 0x31, 0x31,
0x3a, 0x62, 0x66, 0x3a, 0x39, 0x65, 0x3a, 0x39,
0x32, 0x3a, 0x30, 0x63, 0x22, 0x2c, 0x20, 0x22,
0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x22, 0x20,
0x3a, 0x20, 0x22, 0x63, 0x6c, 0x69, 0x65, 0x6e,
0x74, 0x2e, 0x6e, 0x6f, 0x74, 0x69, 0x66, 0x79,
0x44, 0x65, 0x76, 0x49, 0x6e, 0x66, 0x6f, 0x22,
0x2c, 0x20, 0x22, 0x70, 0x61, 0x72, 0x61, 0x6d,
0x73, 0x22, 0x20, 0x3a, 0x20, 0x7b, 0x20, 0x22,
0x64, 0x65, 0x76, 0x69, 0x63, 0x65, 0x49, 0x6e,
0x66, 0x6f, 0x22, 0x20, 0x3a, 0x20, 0x7b, 0x20,
0x22, 0x41, 0x6c, 0x61, 0x72, 0x6d, 0x49, 0x6e,
0x70, 0x75, 0x74, 0x43, 0x68, 0x61, 0x6e, 0x6e,
0x65, 0x6c, 0x73, 0x22, 0x20, 0x3a, 0x20, 0x30,
0x2c, 0x20, 0x22, 0x41, 0x6c, 0x61, 0x72, 0x6d,
0x4f, 0x75, 0x74, 0x70, 0x75, 0x74, 0x43, 0x68,
0x61, 0x6e, 0x6e, 0x65, 0x6c, 0x73, 0x22, 0x20,
0x3a, 0x20, 0x30, 0x2c, 0x20, 0x22, 0x44, 0x65,
0x76, 0x69, 0x63, 0x65, 0x43, 0x6c, 0x61, 0x73,
0x73, 0x22, 0x20, 0x3a, 0x20, 0x22, 0x49, 0x50,
0x43, 0x22, 0x2c, 0x20, 0x22, 0x44, 0x65, 0x76,
0x69, 0x63, 0x65, 0x54, 0x79, 0x70, 0x65, 0x22,
0x20, 0x3a, 0x20, 0x22, 0x49, 0x50, 0x43, 0x2d,
0x48, 0x44, 0x57, 0x34, 0x34, 0x32, 0x36, 0x43,
0x22, 0x2c, 0x20, 0x22, 0x48, 0x74, 0x74, 0x70,
0x50, 0x6f, 0x72, 0x74, 0x22, 0x20, 0x3a, 0x20,
0x38, 0x30, 0x2c, 0x20, 0x22, 0x49, 0x50, 0x76,
0x34, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73,
0x22, 0x20, 0x3a, 0x20, 0x7b, 0x20, 0x22, 0x44,
0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x47, 0x61,
0x74, 0x65, 0x77, 0x61, 0x79, 0x22, 0x20, 0x3a,
0x20, 0x22, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36,
0x38, 0x2e, 0x31, 0x2e, 0x31, 0x22, 0x2c, 0x20,
0x22, 0x44, 0x68, 0x63, 0x70, 0x45, 0x6e, 0x61,
0x62, 0x6c, 0x65, 0x22, 0x20, 0x3a, 0x20, 0x66,
0x61, 0x6c, 0x73, 0x65, 0x2c, 0x20, 0x22, 0x49,
0x50, 0x41, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73,
0x22, 0x20, 0x3a, 0x20, 0x22, 0x31, 0x39, 0x32,
0x2e, 0x31, 0x36, 0x38, 0x2e, 0x31, 0x2e, 0x33,
0x36, 0x22, 0x2c, 0x20, 0x22, 0x53, 0x75, 0x62,
0x6e, 0x65, 0x74, 0x4d, 0x61, 0x73, 0x6b, 0x22,
0x20, 0x3a, 0x20, 0x22, 0x32, 0x35, 0x35, 0x2e,
0x32, 0x35, 0x35, 0x2e, 0x32, 0x35, 0x35, 0x2e,
0x30, 0x22, 0x20, 0x7d, 0x2c, 0x20, 0x22, 0x49,
0x50, 0x76, 0x36, 0x41, 0x64, 0x64, 0x72, 0x65,
0x73, 0x73, 0x22, 0x20, 0x3a, 0x20, 0x7b, 0x20,
0x22, 0x44, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74,
0x47, 0x61, 0x74, 0x65, 0x77, 0x61, 0x79, 0x22,
0x20, 0x3a, 0x20, 0x22, 0x32, 0x30, 0x30, 0x38,
0x3a, 0x3a, 0x31, 0x22, 0x2c, 0x20, 0x22, 0x44,
0x68, 0x63, 0x70, 0x45, 0x6e, 0x61, 0x62, 0x6c,
0x65, 0x22, 0x20, 0x3a, 0x20, 0x66, 0x61, 0x6c,
0x73, 0x65, 0x2c, 0x20, 0x22, 0x49, 0x50, 0x41,
0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x22, 0x20,
0x3a, 0x20, 0x22, 0x32, 0x30, 0x30, 0x38, 0x3a,
0x3a, 0x36, 0x5c, 0x2f, 0x31, 0x31, 0x32, 0x22,
0x2c, 0x20, 0x22, 0x4c, 0x69, 0x6e, 0x6b, 0x4c,
0x6f, 0x63, 0x61, 0x6c, 0x41, 0x64, 0x64, 0x72,
0x65, 0x73, 0x73, 0x22, 0x20, 0x3a, 0x20, 0x22,
0x66, 0x65, 0x38, 0x30, 0x3a, 0x3a, 0x34, 0x65,
0x31, 0x31, 0x3a, 0x62, 0x66, 0x66, 0x66, 0x3a,
0x66, 0x65, 0x39, 0x65, 0x3a, 0x39, 0x32, 0x30,
0x63, 0x5c, 0x2f, 0x36, 0x34, 0x22, 0x20, 0x7d,
0x2c, 0x20, 0x22, 0x4d, 0x61, 0x63, 0x68, 0x69,
0x6e, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x22, 0x20,
0x3a, 0x20, 0x22, 0x31, 0x43, 0x30, 0x33, 0x43,
0x31, 0x41, 0x50, 0x41, 0x41, 0x30, 0x30, 0x30,
0x38, 0x39, 0x22, 0x2c, 0x20, 0x22, 0x4d, 0x61,
0x6e, 0x75, 0x66, 0x61, 0x63, 0x74, 0x75, 0x72,
0x65, 0x72, 0x22, 0x20, 0x3a, 0x20, 0x22, 0x44,
0x61, 0x68, 0x75, 0x61, 0x22, 0x2c, 0x20, 0x22,
0x50, 0x6f, 0x72, 0x74, 0x22, 0x20, 0x3a, 0x20,
0x33, 0x37, 0x37, 0x37, 0x37, 0x2c, 0x20, 0x22,
0x52, 0x65, 0x6d, 0x6f, 0x74, 0x65, 0x56, 0x69,
0x64, 0x65, 0x6f, 0x49, 0x6e, 0x70, 0x75, 0x74,
0x43, 0x68, 0x61, 0x6e, 0x6e, 0x65, 0x6c, 0x73,
0x22, 0x20, 0x3a, 0x20, 0x30, 0x2c, 0x20, 0x22,
0x53, 0x65, 0x72, 0x69, 0x61, 0x6c, 0x4e, 0x6f,
0x22, 0x20, 0x3a, 0x20, 0x22, 0x31, 0x43, 0x30,
0x33, 0x43, 0x31, 0x41, 0x50, 0x41, 0x41, 0x30,
0x30, 0x30, 0x38, 0x39, 0x22, 0x2c, 0x20, 0x22,
0x56, 0x65, 0x6e, 0x64, 0x6f, 0x72, 0x22, 0x20,
0x3a, 0x20, 0x22, 0x44, 0x61, 0x68, 0x75, 0x61,
0x22, 0x2c, 0x20, 0x22, 0x56, 0x65, 0x72, 0x73,
0x69, 0x6f, 0x6e, 0x22, 0x20, 0x3a, 0x20, 0x22,
0x32, 0x2e, 0x34, 0x30, 0x30, 0x2e, 0x30, 0x30,
0x30, 0x30, 0x2e, 0x33, 0x34, 0x2e, 0x52, 0x22,
0x2c, 0x20, 0x22, 0x56, 0x69, 0x64, 0x65, 0x6f,
0x49, 0x6e, 0x70, 0x75, 0x74, 0x43, 0x68, 0x61,
0x6e, 0x6e, 0x65, 0x6c, 0x73, 0x22, 0x20, 0x3a,
0x20, 0x31, 0x2c, 0x20, 0x22, 0x56, 0x69, 0x64,
0x65, 0x6f, 0x4f, 0x75, 0x74, 0x70, 0x75, 0x74,
0x43, 0x68, 0x61, 0x6e, 0x6e, 0x65, 0x6c, 0x73,
0x22, 0x20, 0x3a, 0x20, 0x31, 0x36, 0x20, 0x7d,
0x20, 0x7d, 0x20, 0x7d, 0x00};

int addrLen = sizeof(struct sockaddr_in);

if((sockListen = socket(AF_INET, SOCK_DGRAM, 0)) == -1){
printf("socket fail\n");
return -1;
}

int set = 1;
setsockopt(sockListen, SOL_SOCKET, SO_BROADCAST | SO_REUSEADDR, &set, sizeof(int));

struct sockaddr_in recvAddr;
recvAddr.sin_family = AF_INET;
recvAddr.sin_port = htons(5050);
recvAddr.sin_addr.s_addr = INADDR_ANY;
memset(recvAddr.sin_zero, 0, 8);

// 必须绑定，否则无法监听
if(bind(sockListen, (struct sockaddr *)&recvAddr, sizeof(struct sockaddr)) == -1){
printf("bind fail\n");
return -1;
}

struct sockaddr_in send_addr;

send_addr.sin_family = AF_INET;
send_addr.sin_addr.s_addr = inet_addr("255.255.255.255");
send_addr.sin_port = htons(37810);
memset(send_addr.sin_zero, 0, 8);

socklen_t server_addr_length = sizeof(send_addr);

/* 数据收发 */
if((recvbytes = recvfrom(sockListen, recvbuf, 128, 0,
(struct sockaddr *)&recvAddr, &addrLen)) != -1)
{

  recvbuf[recvbytes] = '\0';
  printf("receive a broadCast messgse:%s\n", recvbuf);

  /* 收到广播包后回一个广播包 */

sendto(sockListen,buffer,BUFFER_SIZE,0,(struct sockaddr*)&send_addr,sizeof(struct sockaddr));
  printf("send packet success!\n");

}
else
{
  printf("recvfrom fail\n");
}

close(sockListen);

return 0;
}
。

在linux下编译执行就可以了。

本人小白一枚，刚到公司实习。对于广播包，心跳包的概念刚刚建立，希望通过小小的实验能有所收获。现在对该实验作个小小的记录。也是第一次写文章，希望从事安防的大牛们的多多支持。也希望通过这样的方式能加强自己写文章的水平。

利用Linux socket 模拟大华IPC发送广播包，让大华客户端搜索到一个模拟的ip摄像头相关推荐

Android Socket 发送广播包的那些坑
转载文章,文章原始出处:http://ticktick.blog.51cto.com/823160/1707858 Socket广播包经常被用于局域网内的两台设备之间互相发现和消息传递,在Androi ...
linux下网络监听与发送数据包的方法(即libpcap、libnet两种类库的使用方法)
linux下可以用libpcap函数库实现监听数据包,使用libnet 函数库发送数据包安装: 在命令行下apt-get install 就可以了 libpcap的使用: /*author hjjd ...
linux网络接口数据重新封包,Linux网络之设备接口层:发送数据包流程dev_queue_xmit...
写在前面本文主要是分析kernel-3.8的源代码,主要集中在Network的netdevice层面,来贯穿interface传输数据包的流程,kernel 博大精深,这也仅仅是一点个人愚见,作为一 ...
linux 监听数据包,linux下网络监听与发送数据包的方法(即libpcap、libnet两种类库的使用方法)...
linux下可以用libpcap函数库实现监听数据包,使用libnet 函数库发送数据包安装: 在命令行下apt-get install 就可以了 libpcap的使用: /*author hjj ...
linux 下串口转usb不能发送数据包,红帽redhat下串口转USB问题 linux
满意答案参考答案: 奇文共欣赏,疑义相与析.(陶渊明) 1.将设备u口插入pc 2.输入#lsmod 先看看能否检测到这个设备,就看有没有pl2303字眼可以了.如果有,则不需要再装驱动.另外如果有 ...
linux内核协议栈 connect 系统调用Ⅰ之发送 SYN 包
Table of Contents 1 connect 功能概述 2. connect 内核实现 2.1 sys_connect 2.2 TCP流式套接字连接 inet_stream_connect ...
linux 下串口转usb不能发送数据包,Linux ,USB转串口驱动,没法读到数据
Linux ,USB转串口驱动,无法读到数据 usb 1-1.1: new full-speed USB device number 5 using ehci-pci usb 1-1.1: New U ...
Android Socket通信发送心跳包重连
最近项目中,有使用Socket与后端进行通信,然后简单的了解了下Socket使用,大致流程是配置服务端的Ip.端口号,连接,监听数据和发送数据,数据的读取和发送都是以流的形式实现的,然后自己将项目中的 ...
利用原始socket简单实现FTP的客户端和服务器端程序
1.设计目的本设计旨在利用原始socket简单实现FTP(File Transfer Protocol,文件传输协议)的客户端和服务器端程序,能够实现get.put.pwd.dir.cd等基本交互命 ...
linux socket UDP广播
概述: 网络上的广播指:由一台主机向该主机所在子网内(同一个局域网)的所有主机发送数据的方式实现广播,离不开广播地址,同一个子网(局域网)的所有主机网卡都会接收所在网段广播地址的数据包.广播地址应用 ...

利用Linux socket 模拟大华IPC发送广播包，让大华客户端搜索到一个模拟的ip摄像头

利用Linux socket 模拟大华IPC发送广播包，让大华客户端搜索到一个模拟的ip摄像头相关推荐

最新文章

热门文章