Flir E4 Thermal imaging camera teardown

[mikeselectricstuff]

Thank you Gemrough, I'm know this will help countless others too.  It would be great if the moderator could stick this into a sticky at the beginning if the post so it doesn't get lost.

Already done

[ringmaster]

Big thank you to janekivi and the other early guys who made this possible!

[janekivi]

This is great! Thanks to all and thanks for help.

But now I reached to the limits with  2015 menu for 2.3.0.
I have all kind of measurement tools and other stuff but turns out
the T4XX, T6XX and the others do not have them all at once.
Another thing I don't know is the resources - what is necessary for what.
Conf samples from older cameras in this thread is not usable, they changed
resource tree and my E4 missing many things at all.
And what we are missing -
video
panorama
all kind of stuff what asking touch screen or more buttons

We continue our work.

Experimental stage 04 and 05, all items you see in here is not working
2015_B_0.4.avi
2015_B_0.5.avi

[amator]

I have done the e4-e8 resolution  "upgrade" for my flir E4B camera. Thanks for You and others.  It's working really great, the only think that make my unhappy is probably bad pixel, that wasn't visible before (in the lower resolution).
P.S.
It's not a bad pixel, but only dust behind the lens (inside the camera)

[janekivi]

Does any flir camera allow to customize alarm like this?
(green below alarm on iron palette)
Any menu example about this?
(About measures: I have here custom spot and box max and "delta spot to box max")

[joe-c]

Does any flir camera allow to customize alarm like this?
(green below alarm on iron palette)
Any menu example about this?
(About measures: I have here custom spot and box max and "delta spot to box max")

To the first Question... yes... see Attachment -> Isotherm
In Resource Tree it is also possible, to setup an Email notification... but i cant get this working.

And about the second... i never seen this Display type before (meaning the Setting in the center below)

[janekivi]

My measurement boxes wasn't part of the question, they are just... part of the testing.
But now
I don't understand anything about signture stuff but stuck here with conf lenght.
I found out that he knows exactly where (I think) signature is beginning and I
can't write anything behind that point. I can delete signature and make conf
smaller but not bigger. So the conf size is limited... ( again  ).
And ui conf not accepted at all 
After looking inside common_dll.dll I found rows

Code: [Select]

RSA1 blabla..............................................................................blabla
Any probable_VAL!   Hxdsf ekj6l-ja*k_mlxccUkmt+25,HqKWQxd   S T m p K e y C o n t   %02X    CFC

Code: [Select]

.text:001052E4     LDR     R1, =aHxdsfEkj6lJaK_ ; "Hxdsf ekj6l-ja*k_mlxccUkmt+25,HqKWQxd"is this some sort of key?

[FredB]

Experimental stage 04 and 05, all items you see in here is not working
2015_B_0.4.avi
2015_B_0.5.avi

That's really a great toy with many possibilities.
You almost need a manual for it. 

[krom]

has anyone gotten this to work in win8?

I've used FLIRInstallNet.exe,
Set_RNDIS_permanent .fif,
and now the flir tools is showing the camera as:"Local Area Connection - 169.254.239.1"
Windows control panel is showing "FLIR camera network device"
under the properties for it  shows

Connection-specific DNS Suffix:
Description: FLIR Camera Network Device
Physical Address: ?00-40-7F-0B-9E-DB
DHCP Enabled: Yes
Autoconfiguration IPv4 Address: 169.254.239.0
IPv4 Subnet Mask: 255.255.0.0
IPv4 Default Gateway:
IPv4 DNS Server:
IPv4 WINS Server:
NetBIOS over Tcpip Enabled: Yes
Link-local IPv6 Address: fe80::5dc8:1700:47a5:ef00%9
IPv6 Default Gateway:
IPv6 DNS Servers: fec0:0:0:ffff::1%1, fec0:0:0:ffff::2%1, fec0:0:0:ffff::3%1

It doesn't show up when running ipconfig, and I'm unable to ftp to the 169.254.239.0 ip.

[heavybarrel]

Make sure your network adapter in your pc is set correctly. Try setting the adapters address to 169.254.239.100 and see if that helps 

[krom]

Make sure your network adapter in your pc is set correctly. Try setting the adapters address to 169.254.239.100 and see if that helps 

getting closer.
now ftp is telling me:

Status:   Connecting to 169.254.239.100:21...
Status:   Connection attempt failed with "ECONNREFUSED - Connection refused by server".

[heavybarrel]

Go to the command prompt and try to ping the cameras ip address when it is connected. If pinging comes back failed you have something going on that is prohibiting communication to the camera. If this is something you have never done before, at the command prompt simply type ping "space" "cameras ip address".

[janekivi]

Does any flir camera allow to customize alarm like this?
(green below alarm on iron palette)
Any menu example about this?

To the first Question... yes... see Attachment -> Isotherm
In Resource Tree it is also possible, to setup an Email notification... but i cant get this working.

This is working. You can change all in here:
.image.sysimg.measureFuncs.isotherm

Code: [Select]

.image.sysimg.measureFuncs.isotherm.1: (19)
rw--rw--rw--np*1 root   root   <b> active                     false
rw--rw--rw--np 2 root   root   <a> attr               "transparent"
                 ["solid" "transparent" "unchanged" "linked"]
rw--rw--rw--np 1 root   root   <i> calcMask                    0x14
                 [0x0, 0x14]
r---r---r---1- 0 root   root   <a> changed                   "TEMP"
rw--rw--rw--np 2 root   root   <a> color                     "blue"
                 ["palette1" "palette2" "red" "green" "blue" "yellow" "cyan" "magenta" "gray" "palette" "ycbcr"]
rw--rw--rw--np 2 root   root   <i> colorCb                        0
                 [16, 240]
rw--rw--rw--np 2 root   root   <i> colorCr                        0
                 [16, 240]
rw--rw--rw--np 2 root   root   <i> colorY                         0
                 [16, 235]
rw----------0- 0 root   root   <b> commitResult               false
rw----------0- 0 root   root   <b> finalCalc                  false
rw--rw--rw--np 1 root   root   <i> high                       12114
rw--rw--rw--np 1 root   root   <d> highT                  294.34999
rw--r---r---0- 1 root   measure <u> highValid                     ""
rw--rw--rw--np 0 root   root   <u> label                        "1"
                 [32]
rw--rw--rw--np 1 root   root   <i> low                        10701
rw--rw--rw--np 1 root   root   <d> lowT                   273.14999
rw--r---r---0- 1 root   measure <u> lowValid                      ""
rw----------0- 0 root   root   <a> preCalc                       ""
rw--rw--rw--np 2 root   root   <a> type                     "below"
                 ["below" "above" "interval" "fixScaleAbove" "dualAbove" "dualBelow" "invInterval" "dewpoint" "fixScaleBelow"]With telnet this is in realtime, now I must only make menu for this...

[krom]

Go to the command prompt and try to ping the cameras ip address when it is connected. If pinging comes back failed you have something going on that is prohibiting communication to the camera. If this is something you have never done before, at the command prompt simply type ping "space" "cameras ip address".

ping works

Pinging 169.254.239.100 with 32 bytes of data:
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128

Ping statistics for 169.254.239.100:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

169.254.239.200
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

 
I'm getting this at the command prompt also.

Windows IP Configuration


Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::5dc8:1700:47a5:ef00%9
   IPv4 Address. . . . . . . . . . . : 169.254.239.100
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . : 169.254.239.200

Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::8860:357c:53c1:940e%3
   IPv4 Address. . . . . . . . . . . : 192.168.0.4
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.1

Tunnel adapter isatap.{7581A323-7EC1-47C1-AAD5-038726D03316}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter Local Area Connection* 12:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter isatap.{BC68158C-C486-4AE1-9156-FD419F72164E}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

when I try to ftp from the command prompt

ftp> open 169.254.239.200
> ftp: connect :Connection timed out
ftp>

when I try to use filezilla to ftp

Status:   Connecting to 169.254.239.200:21...
Error:   Connection timed out
Error:   Could not connect to server
Status:   Waiting to retry...
Status:   Connecting to 169.254.239.200:21...
Error:   Connection timed out
Error:   Could not connect to server
Status:   Connecting to 169.254.239.100:21...
Status:   Connection attempt failed with "ECONNREFUSED - Connection refused by server".
Error:   Could not connect to server
Status:   Waiting to retry...
Status:   Connecting to 169.254.239.100:21...
Status:   Connection attempt failed with "ECONNREFUSED - Connection refused by server".
Error:   Could not connect to server

[Chanc3]

Looks like your network adaptor isn't picking up the camera. Have you tried disabling all the other adaptors before connecting your camera?

[FredB]

@krom

Did you install the flir device drivers on your computer? 

[joe-c]

This is working. You can change all in here:
.image.sysimg.measureFuncs.isotherm
...
With telnet this is in realtime, now I must only make menu for this...

A menu sounds interesting for functions like that. But I also know and use the internal UART with a micro controller (speed is similar to telnet)... so I can make a additional hardware button for the functions I want.
Because that I spend no time to improve the camera menu yet... maybe later...

Here the full Resource Tree if you wish to discover.
There I found also the other functions like radiometric video sequence or other nice things I used in my Software (see here).

[heavybarrel]

ping works

Pinging 169.254.239.100 with 32 bytes of data:
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128

Ping statistics for 169.254.239.100:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

169.254.239.200
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

 
I'm getting this at the command prompt also.

Windows IP Configuration


Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::5dc8:1700:47a5:ef00%9
   IPv4 Address. . . . . . . . . . . : 169.254.239.100
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . : 169.254.239.200

Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::8860:357c:53c1:940e%3
   IPv4 Address. . . . . . . . . . . : 192.168.0.4
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.1

Looks like you pinged the network adapter, wasn't the cameras reported address 169.254.239.2 ?? I didn't go back and look.
You might not be using the correct ip address to connect to the camera.

[mrflibble]

ping works

Pinging 169.254.239.100 with 32 bytes of data:
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128

I'm getting this at the command prompt also.

Windows IP Configuration


Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::5dc8:1700:47a5:ef00%9
   IPv4 Address. . . . . . . . . . . : 169.254.239.100

You were pinging the PC side of the link. And by extention you were also trying to make an ftp connection to an ftp server on your PC, which presumably isn't there.

The E4 will have a different IP.

[viacom1]

You have to use Windows 7 or older in order for this to work properly.  I have tried everything with windows 8 and just wasted a ton of time.  Emulators dont seem to work either.  This should be noted in the hack instructions and main link as no one knows this is an issue at first.

ping works

Pinging 169.254.239.100 with 32 bytes of data:
Reply from 169.254.239.100: bytes=32 time<1ms TTL=128

I'm getting this at the command prompt also.

Windows IP Configuration


Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::5dc8:1700:47a5:ef00%9
   IPv4 Address. . . . . . . . . . . : 169.254.239.100

You were pinging the PC side of the link. And by extention you were also trying to make an ftp connection to an ftp server on your PC, which presumably isn't there.

The E4 will have a different IP.

[janekivi]

Hi!
Menu updates with name like this were temporary and they disappearing.
You must read forward from it and then you find newer ones...
Or if you really need it I have all my old files somewhere.

I had nothing to do and replaced old menu and conf back... nostalgic...
and did here test with noise. After 800 it disappears and 900 1000 2000 were clear.

[leoibb]

Slightly off subject but is there. A way to maybe plug Bluetooth adapter in the port and pick picture up on a phone ? . I managed to transfer pictures to phone via usb connection but sending video via Bluetooth much better .can it be done

[Bud]

After looking inside common_dll.dll I found rows

Code: [Select]

RSA1 blabla..............................................................................blabla
is this some sort of key?

Yes seems to be a RSA public key, could be the one used for signatures
data structure: RSA1
next 4 bytes: 00 04 00 00 (little endian ) ->  00 00 04 00 ->1024, the modulus length
next 4 bytes: 01 00 01 00 (little endian ) ->  00 01 00 01 -> 65537, the exponent
next 128 bytes: the modulus

Microsoft says "All values are in little-endian format.". Not sure what that means for the modulus. Does it have to be completely reversed or every other 2/4 bytes (depending on the processor bus width) have to be reversed. May be someone more knowledgeable could comment.

But do we still care about this key providing signature check was patched ?

[janekivi]

No...
But what you think that noise is doing?
.caps.config.image.targetNoise.targetNoiseMk
There I have "measure tool" "line" with "graph", no other measurements.

[Bud]

Based on prior discussions it is believed that the noise setting is to control camera sensitivity, perhaps to set the desired figure of sensitivity in the camera specification.