rtsp update

hw3/hw3.md

@@ -93,7 +93,7 @@ Using ssh tunneling from 192.168.0.1:80 to localhost:8080, I can take a look at
 I decided not to try any attacks against the router and will be moving on.
 
 ### Open ports and services on bookworm
-Bookworm is running rtmp and sun-answerbook services. This is interesting. I will explore the rtmp stream later on
+Bookworm is several different services, including an RTSP stream. This is interesting. I will explore the RTSP stream later on
 
 ![bookwork-scan](./bookworm-scan.png)
 
@@ -111,10 +111,89 @@ The only interesting service running here is ssh. Moving on
 
 ### Access the RTSP stream
 
-So far, it seems the RTSP stream likely resides on bookworm. I first explored the server on port 1935, testing RTMP and RTSP streaming, as well as HTTP requests but I did not find a feed.
+On bookworm, the RTSP stream is available on the RTSP alt port, 8554. Using ssh port tunneling of 192.168.0.139:8554 to mallory, and then to my local machine, I can view this rtsp stream in `mpv`
+![stream](./stream.png)
 
-I then tested the service on port 8888. It appears to be running an HTTP server, so I will take a look at this in a browser
+#### Camera make, model, brand, capacity, and manufacture date
+Not much can be understand about the camera hardware directly from RTSP stream information. We can see dimensions, codecs, and pixel formats with `ffprobe` as shown
+
+```
+❯ ffprobe -v quiet -print_format json -show_format -show_streams rtsp://192.168.0.139:8554/cam
+{
+
+    "streams": [
+        {
+            "index": 0,
+            "codec_name": "h264",
+            "codec_long_name": "H.264 / AVC / MPEG-4 AVC / MPEG-4 part 10",
+            "profile": "Main",
+            "codec_type": "video",
+            "codec_tag_string": "[0][0][0][0]",
+            "codec_tag": "0x0000",
+            "width": 1920,
+            "height": 1080,
+            "coded_width": 1920,
+            "coded_height": 1080,
+            "closed_captions": 0,
+            "film_grain": 0,
+            "has_b_frames": 0,
+            "pix_fmt": "yuv420p",
+            "level": 41,
+            "chroma_location": "left",
+            "field_order": "progressive",
+            "refs": 1,
+            "is_avc": "false",
+            "nal_length_size": "0",
+            "r_frame_rate": "90000/2999",
+            "avg_frame_rate": "30/1",
+            "time_base": "1/90000",
+            "start_pts": 14270,
+            "start_time": "0.158556",
+            "bits_per_raw_sample": "8",
+            "extradata_size": 49,
+            "disposition": {
+                "default": 0,
+                "dub": 0,
+                "original": 0,
+                "comment": 0,
+                "lyrics": 0,
+                "karaoke": 0,
+                "forced": 0,
+                "hearing_impaired": 0,
+                "visual_impaired": 0,
+                "clean_effects": 0,
+                "attached_pic": 0,
+                "timed_thumbnails": 0,
+                "non_diegetic": 0,
+                "captions": 0,
+                "descriptions": 0,
+                "metadata": 0,
+                "dependent": 0,
+                "still_image": 0
+            }
+        }
+    ],
+    "format": {
+        "filename": "rtsp://192.168.0.139:8554/cam",
+        "nb_streams": 1,
+        "nb_programs": 0,
+        "format_name": "rtsp",
+        "format_long_name": "RTSP input",
+        "start_time": "0.158556",
+        "probe_score": 100,
+        "tags": {
+            "title": " "
+        }
+    }
+}
+
+```
+
+I also tried sending an RTSP describe request, as shown
+![describe](./describe.png)
+
+Additionally, I explored the web interfaces hosted on 8888 and 8889 and looked at the HTTP network requests. I could not find hardware information about the camera.
+
+My best guess is that some sort of "official" raspberry pi camera is utilized for this stream. Particularly one that is newer or of higher quality based on the 1080 HD stream.
 
-#### Screenshot - TODO
 
-#### Camera make, model, brand, capacity, and manufacture date - TODO